Related to previous issue, it might make sense to check for attempting to use public subnets in the EKS config. Since I believe it will always be a mistake, since then nodes can't actually get associated to the cluster.

What exactly did you try that didn't work? I expected all combinations here to actually be supported - all public, public+private, and all private are all things that EKS (and pulumi-eks) can support.

Let me see if I can track down the info I'm thinking of