<p>I have two server to work as master and work node on AWS Cloud Setup.</p>

<pre><code>master node
  17.51.233.41
work node
  17.51.34.188
</code></pre>

<p>In master node, I success using <code>kubeadm init</code> to setup with Calico network. It report message code for me to join other node</p>

<pre><code>kubeadm join 172.31.43.44:6443 --token XXX \
    --discovery-token-ca-cert-hash sha256:XXX
</code></pre>

<p>But when I try to using this code to join work node, it seems cannot access to this ip port <code>172.31.43:6443</code>, and report error message below.</p>

<pre><code>I0124 11:38:19.807720    
6665 token.go:191] [discovery] Failed to connect to API Server "172.31.43.44:6443": 
Get https://172.31.43.44:6443/api/v1/namespaces/kube-public/configmaps/cluster-info?timeout=10s: 
context deadline exceeded (Client.Timeout exceeded while awaiting headers)
</code></pre>

<p>How can I connect work node to the master?</p>

<p>I think you need to allow traffic from worker to master by creating application security group in AWS EC2 dashboard. <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-security-groups.html#creating-security-group" rel="nofollow noreferrer">Here</a> is the documentation on how to create security group for EC2 instance.</p>
