might be outdated, but the problem I see is that I need a nat gateway for the solely purpose to allow the workers to enroll in the control plain. This makes absolutely no sense and downgrades the security of the cluster, because opens it to reach the internet, and I don't want that at all. Usually aws solves this by providing a vpc endpoint for similar case: is there something for eks as well?
Maybe one such endpoint type is in development?
No real fix for this yet IIRC
Ok thanks. Do we share the same concern?
Обсуждают сегодня