In OKE typically you create, for redundancy and high availability reasons, a k8s cluster in 5 or more subnets:
- 2 are public and, in there, is where the public load balancer is deployed, for example one in AD1 and the other in AD3
- 3 or more are private, and, in there, is where the worker compute nodes are deployed, for example one subnet in AD1, other in AD2, other in AD3 and looping…
If you need to reach one or more compute worker nodes for some reason, you can create a bastion server (jump box) with a public IP and then do the following:
ssh -i privateKey -N -L localhost:2222:k8scomputenode:22 opc@jumpboxpublicip ssh -i privateKey -p 2222 opc@localhost
Hope it helps! 🙂
approaching off the bow 