I have built a private EKS cluster, im now going through the motions of trying to attach a Managed Node group to the cluster using Terraform.
Looking through lots of resource the Node group required internet access to connect to the cluster endpoint. AWS have recently added the ability for launch templates on node. I have tried this though and have been unsuccessful thus far.
My questions really is around the proxy configuration side. I do not wish for the nodes to have permanent access to the internet through the proxy. Yes, I could in theory block the access outside the node group after they are built, but this is not ideal.
Is it possible to setup a private endpoint for the EKS cluster to allow the node group to connect to that? What other options do I have to get these to register?