From 42a6924738471feb7da4b3b204c3f591922a831b Mon Sep 17 00:00:00 2001
From: Peter Zhu <zhujiaxi@amazon.com>
Date: Wed, 29 Mar 2023 20:27:56 +0000
Subject: [PATCH] Make Jenkins use private subnet for all nodes

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
---
 lib/ci-stack.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/ci-stack.ts b/lib/ci-stack.ts
index 8f52cce3..9060acdf 100644
--- a/lib/ci-stack.ts
+++ b/lib/ci-stack.ts
@@ -175,7 +175,7 @@ export class CIStack extends Stack {
       failOnCloudInitError: props?.ignoreResourcesFailures,
       adminUsers: props?.adminUsers,
       agentNodeSecurityGroup: this.securityGroups.agentNodeSG.securityGroupId,
-      subnetId: vpc.publicSubnets[0].subnetId,
+      subnetId: vpc.privateSubnets[0].subnetId,
     }, this.agentNodes, macAgentParameter.toString(), props?.agentAssumeRole);
 
     const externalLoadBalancer = new JenkinsExternalLoadBalancer(this, {