quickstart-amazon-eks-cluster-resource-provider icon indicating copy to clipboard operation
quickstart-amazon-eks-cluster-resource-provider copied to clipboard

Cluster is not created as private only at creation time

Open oliverf1 opened this issue 3 years ago • 2 comments

Even if we specify EndpointPrivateAccess: true and EndpointPublicAccess: false, the cluster will initially be built as public and private and then updated to remove the public access. See: https://github.com/aws-quickstart/quickstart-amazon-eks-cluster-resource-provider/blob/4751da47177fa826ad2ca892cc40082cca11cf64/cmd/resource/eks.go#L87 The problem is the update step takes about 5min. By creating the cluster directly with EndpointPublicAccess: false we will save those 5min. Since a lambda in the owner VPC is created to create the cluster I'm not sure to understand why we can't directly create the cluster as fully private from the beginning.

oliverf1 avatar Apr 13 '21 16:04 oliverf1