Closed george24601 closed 5 years ago
Hello, thank you for the report, we are looking into this issue and will update later. Your patience will be appreciated.
Reusing existing VPC and subnets that created by Terraform for another EKS cluster is not supported now due to various limitations. However, it is possible to make the second cluster deployed by manually adding tag kubernetes.io/cluster/<second_cluster_name>=shared
to the subnets of the first cluster (if that tag doesn't already exist).
Note that this is not recommend and may cause dependency issues when trying to modify or destroy these resources.
We have submitted PR to correctly put resources into public and private subnets, and to make the docs more clear on this kind of situation.
Bug Report
What version of Kubernetes are you using? AWS EKS 1.12 on us-east-2
What did you do?
What did you expect to see? the second tidb cluster will be created inside the same VPC, but on a second EKS cluster
What did you see instead? Unable to connect to the bastion host, because it went to the private subnet
From the tf code, seems that when create_vpc=false, we should use separate subnet id variables for bastion and EKS, so that bastion goes to the public subnet, EKS private? https://github.com/pingcap/tidb-operator/blob/master/deploy/aws/main.tf#L72 https://github.com/pingcap/tidb-operator/blob/master/deploy/aws/main.tf#L89