Is there a way to prevent NodeGroup to create EC2 instances with public ip? I'm creating a new NodeGroup, and my EC2 instances have public ip and public dns. If I create ManagedNodeGroup, then EC2 are private

you'd need to create the nodes in a private subnet, what code do you have?

So, this is the code for creating the NodeGroup

const example-ng = new eks.NodeGroup("example-ng", {
    cluster: cluster,
    instanceType: "t2.medium",
    desiredCapacity: 1,
    minSize: 1,
    maxSize: 3,
    instanceProfile: instanceProfile,
    keyName: deployer.keyName,
    nodeUserData: cloudConfig.then((c) => c.rendered)
});

And my cluster has

privateSubnetIds

set to

vpc.privateSubnetIds

pulumi-eks source code should default set subnet ids from the

cluster.privateSubnetIds

You need to set the subnet ids: https://www.pulumi.com/registry/packages/eks/api-docs/nodegroup/#nodesubnetids_nodejs

pulumi-eks source code should default set subnet ids from the cluster.privateSubnetIds

Are you saying you expected the nodes to just automatically be in the right subnet?

Are you saying you expected the nodes to just automatically be in the right subnet?

No, I'm saying that from pulumi-eks source code, NodeGroup should inherit subnet ids from the cluster https://github.com/pulumi/pulumi-eks/blob/d599a1b1f3650dba4c3dc4f560080e95ce6fb5b1/nodejs/eks/nodegroup.ts#L562 Also, if I set subnet ids, like this, I would expect that my EC2 instances have only private IPv4 address, but they get public IPv4 address also

const example-ng = new eks.NodeGroup("example-ng", {
    cluster: cluster,
    instanceType: "t2.medium",
    desiredCapacity: 1,
    minSize: 1,
    maxSize: 3,
    instanceProfile: instanceProfile,
    keyName: deployer.keyName,
    nodeUserData: cloudConfig.then((c) => c.rendered),
    nodeSubnetIds: vpc.privateSubnetIds
});

EC2 from NodeGroup with public address.

oh sorry, I see now. I'll double check

@billowy-army-68599 did you get the change to check this? 🙂

I didn't I'm afraid, will try again today

@billowy-army-68599 pinging again, I know that I'm boring 🙂

hey sorry, unfortunately I've been sidetracked by other customer requests, could you please open an issue on the pulumi-eks repo

https://www.pulumi.com/registry/packages/eks/api-docs/cluster/#nodeassociatepublicipaddress_nodejs Isn't this the toggle you need to flip?

@polite-napkin-90098 i need to check this, if this also fails I will open an issue 🙂