<p>I am not sure it will be helped. I have similar design in my office.</p>
<p>I have some Kubernetes Cluster. all node and master running on local ip from a PVC. And my rds too, only have local ip run on same PVC. Kubernetes Cluster already connect to RDS using local ip.</p>
<p>Then, I build VPN server on bastion server. Have local ip and public ip, run on same PVC with RDS and Kubernetes cluster. So when need connect, I just start my vpn connection on my laptop.</p>
<p>Only vpn/bastion server have IP public. + Load balancer too.</p>
<p>I hope this will give you inspiration.</p>

CC BY-SA 4.0
2020-08-24T11:41:40.180Z
I did not understand this fully though, do you have any kind of documentation or written somewhere? sounds like, it might be helpful to me. and many others.
Saikat Chakrabortty
CC BY-SA 4.0
2020-08-25T08:01:47.423Z
@SaikatChakrabortty I am not use AWS for now, but as theory, this is concept from GCP. https://cloud.google.com/kubernetes-engine/docs/concepts/private-cluster-concept. Will write doc soon on my blog about this.
Estu Fardani
CC BY-SA 4.0
2020-08-11T04:23:17.977Z
2020-08-11T04:23:17.977Z
Estu Fardani
<p>I'm looking for some way to <strong>allow access to RDS (Private endpoint) instances from local machine</strong> for a specific set of people (for the internal team.)</p>
<p><strong>ways I know:</strong> Create Bastion EC2 and through SSH tunneling connect from local.</p>
<p>as I'm already using k8s from where the instances are reachable. is there any way to do some kind of port forwarding and finally connect RDS instance from local machine?</p>
<p>what I was trying: as I'm already having k8s which has access to those RDS instances, I tried creating a service in that, and through the Loadbalancer, I tried to connect using ssh but failed. (Probably I misunderstood/missing something in the process.)</p>
<p>is there any other secure easy way to do it?</p>

<amazon-rds><eks>
Secure RDS (private endpoint) and allow connecting from local machine for specific predefined users
Saikat Chakrabortty
# Secure RDS (private endpoint) and allow connecting from local machine for specific predefined users

(Asked by: username_0 on 2020-08-07)

I'm looking for some way to **allow access to RDS (Private endpoint) instances from local machine** for a specific set of people (for the internal team.)

**ways I know:** Create Bastion EC2 and through SSH tunneling connect from local.

as I'm already using k8s from where the instances are reachable. is there any way to do some kind of port forwarding and finally connect RDS instance from local machine?

what I was trying: as I'm already having k8s which has access to those RDS instances, I tried creating a service in that, and through the Loadbalancer, I tried to connect using ssh but failed. (Probably I misunderstood/missing something in the process.)

is there any other secure easy way to do it?

**Tags:** amazon-rds, eks


---

## 1 answers

### Answer by username_1 on 2020-08-11. Score: 1

I am not sure it will be helped. I have similar design in my office.

I have some Kubernetes Cluster. all node and master running on local ip from a PVC. And my rds too, only have local ip run on same PVC. Kubernetes Cluster already connect to RDS using local ip.

Then, I build VPN server on bastion server. Have local ip and public ip, run on same PVC with RDS and Kubernetes cluster. So when need connect, I just start my vpn connection on my laptop.

Only vpn/bastion server have IP public. + Load balancer too.

I hope this will give you inspiration.

> **Comments:**
> **username_0**: I did not understand this fully though, do you have any kind of documentation or written somewhere? sounds like, it might be helpful to me. and many others.  
> **username_1**: @SaikatChakrabortty I am not use AWS for now, but as theory, this is concept from GCP. https://cloud.google.com/kubernetes-engine/docs/concepts/private-cluster-concept. Will write doc soon on my blog about this.  

---

