Closed as not planned
Closed as not planned
Description
https://github.com/terraform-aws-modules/terraform-aws-eks/blob/master/node_groups.tf#L182
egress_all = {
description = "Allow all egress"
protocol = "-1"
from_port = 0
to_port = 0
type = "egress"
cidr_blocks = ["0.0.0.0/0"]
ipv6_cidr_blocks = var.cluster_ip_family == "ipv6" ? ["::/0"] : null # Problem here
}
ipv6_cidr_blocks = ["::/0"]
should be at all times because it is safe and without it cluster BREAKs.
After long trobleshooting of my edge case when cluster was broken after I disabled VPC endpoints, systems within EKS preferred ipv6 during DNS resolution and timed out before fallback to ipv4.