quickstart-amazon-eks-cluster-resource-provider
quickstart-amazon-eks-cluster-resource-provider copied to clipboard
Cluster is not created as private only at creation time
Even if we specify EndpointPrivateAccess: true and EndpointPublicAccess: false, the cluster will initially be built as public and private and then updated to remove the public access. See: https://github.com/aws-quickstart/quickstart-amazon-eks-cluster-resource-provider/blob/4751da47177fa826ad2ca892cc40082cca11cf64/cmd/resource/eks.go#L87 The problem is the update step takes about 5min. By creating the cluster directly with EndpointPublicAccess: false we will save those 5min. Since a lambda in the owner VPC is created to create the cluster I'm not sure to understand why we can't directly create the cluster as fully private from the beginning.