With the instruction https://docs.aws.amazon.com/eks/latest/userguide/worker.html it is possible to bring up Kube cluster worker nodes. I wanted the worker node not to have public ip. I don't see Amazon gives me that option as when running the cloudformation script. How can I have option not to have public ip on worker nodes
You need to set this behaviour inside your group node template (Cloudformation template).
NodeLaunchConfig: Type: AWS::AutoScaling::LaunchConfiguration Properties: AssociatePublicIpAddress: false
You would normally set this up ahead of time in the Subnet rather than doing it per machine. You can set Auto-assign public IPv4 address to false in the subnets you are using the for the worker instances.