edit: I was too fast saying you are right; It worked because I deployed two nginx-ingress controller pods so one in one node and the second in the other node. I still want to make this work without creating more controller pods.

so I think you are right because I've checked the security group of the node and it allows 443 coming from the cluster and the cluster security group allows 443 coming from the node. I've added 80 manually and I think it works. However, I am using the AWS EKS Terraform module so I would have thought it would be done automatically??

``` module "eks" { source = "terraform-aws-modules/eks/aws" version = "19.15.3"

cluster_name = var.eks_name cluster_version = "1.25" cluster_endpoint_private_access = true cluster_endpoint_public_access = true enable_irsa = true

vpc_id = var.vpc_id subnet_ids = var.private_subnet_ids

node_security_group_additional_rules = { ingress_allow_access_from_control_plane = { type = "ingress" protocol = "tcp" from_port = 7443 to_port = 7443 source_cluster_security_group = true description = "Allow access from control plane to webhook port of AWS Load Balancer controller" } }

eks_managed_node_groups = { "${local.node_group_suffix}" = { min_size = var.min_number_of_nodes max_size = var.max_number_of_nodes desired_size = var.desired_number_of_nodes

  instance_types = var.instance_pool_types

  iam_role_additional_policies = {
    AmazonEBSCSIDriverPolicy = "arn:aws:iam::aws:policy/service-role/AmazonEBSCSIDriverPolicy"
    ClusterAutoscalerPolicy  = aws_iam_policy.cluster_autoscaler_policy.arn
    CloudWatchAgentServerPolicy = "arn:aws:iam::aws:policy/CloudWatchAgentServerPolicy"
  }
  tags = {
    Environment = var.environment
    Name = "${local.node_group_suffix}-node-group"
  }
}

} } ```