eks worker node public ip assignment

Question

With the instruction https://docs.aws.amazon.com/eks/latest/userguide/worker.html it is possible to bring up Kube cluster worker nodes. I wanted the worker node not to have public ip. I don't see Amazon gives me that option as when running the cloudformation script. How can I have option not to have public ip on worker nodes

Answer 1

You would normally set this up ahead of time in the Subnet rather than doing it per machine. You can set Auto-assign public IPv4 address to false in the subnets you are using the for the worker instances.

Answer 2

You need to set this behaviour inside your group node template (Cloudformation template).

• You have to download your group node template (ex https://amazon-eks.s3-us-west-2.amazonaws.com/cloudformation/2019-02-11/amazon-eks-nodegroup.yaml)
• Edit yaml file replacing the atribbute AssociatePublicIpAddress to false.

  NodeLaunchConfig:
    Type: AWS::AutoScaling::LaunchConfiguration
    Properties:
      AssociatePublicIpAddress: false

• Update your stack (https://console.aws.amazon.com/cloudformation) using the edited file.

Answer 3

As of 2020/03/09, this is not possible.

See this thread.