fix: enable private access on EKS cluster (#204)

cds-snc · Feb 24, 2021 · 3d755e6 · 3d755e6
1 parent 91fcc27
commit 3d755e6
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/aws/eks/eks.tf b/aws/eks/eks.tf
@@ -14,8 +14,9 @@ resource "aws_eks_cluster" "notification-canada-ca-eks-cluster" {
     security_group_ids = [
       aws_security_group.notification-canada-ca-worker.id
     ]
-    subnet_ids             = var.vpc_private_subnets
-    endpoint_public_access = false
+    subnet_ids              = var.vpc_private_subnets
+    endpoint_private_access = true
+    endpoint_public_access  = false
   }
 
   # tfsec:ignore:AWS066 EKS should have the encryption of secrets enabled