<p>I have created an EKS private cluster along with a node group. I'm accessing the cluster through the bastion host.
I'm able to access the cluster and run the pods in the cluster but the pods don't have any internet access.</p>
<p>EKS nodes have internet access and it is able to pull the public docker images but <strong>the pods running inside it don't have internet access</strong>. I'm not using any different networking like calico or anything.</p>
<p>Can someone please help to fix this issue?</p>

Harsha
<p>Below are the troubleshooting steps for your problem:</p>
<p>By default pods are not isolated and they will accept traffic from any source. Please check whether you have met networking requirements or not from this <a href="https://kubernetes.io/docs/concepts/cluster-administration/networking/" rel="nofollow noreferrer">page</a>.</p>
<p>You need to expose your pods to the service</p>
<p>Ex:</p>
<pre><code>$ kubectl run nginx --image=nginx --replicas=5 -n web deployment.apps/nginx created

$ kubectl expose deployment nginx --port=80 -n web service/nginx exposed

$ kubectl get svc -n web NAME    TYPE        CLUSTER-IP     EXTERNAL-IP   PORT(S)   AGE nginx   ClusterIP   10.100.94.70   &lt;none&gt;  80/TCP    2s

# kubectl exec -ti busybox -n web -- nslookup nginx Server:    10.100.0.10 Address 1: 10.100.0.10 ip-10-100-0-10.ap-southeast-2.compute.internal Name:      nginx Address 1: 10.100.94.70 ip-10-100-94-70.ap-southeast-2.compute.internal
</code></pre>
<p>And if it fails; check DNS <a href="https://aws.amazon.com/premiumsupport/knowledge-center/eks-dns-failure/" rel="nofollow noreferrer">troubleshooting</a>.</p>
<ul>
<li>If you use any security groups to the pods then you need to confirm whether there is any communication to the group or not.</li>
<li>Check ACL does not deny any connection.</li>
<li>Subnets should have the default route communications within the VPC.</li>
<li>Check whether you have enough <a href="https://docs.aws.amazon.com/eks/latest/userguide/network_reqs.html#vpc-cidr" rel="nofollow noreferrer">IP addresses</a>.</li>
<li>Your pods should be scheduled and should be in the <a href="https://aws.amazon.com/premiumsupport/knowledge-center/eks-pod-status-troubleshooting/" rel="nofollow noreferrer">running state</a>.</li>
<li>Finally check the version and whether it is compatible or not.</li>
</ul>
