@AlexEsibov we are going to implement the nat-gateway solution here. I have two questions:

1. We have 3 workspaces in dev and 3 in prod. Should we use a unique public-ip/nat-gateway per each workspace or should/could they share the same? The 3 workspaces are devided in to two vnets, please see below clarification:

• vnet1
  • workspace 1
  • workspace 2
• vnet2
  • workspace 3

2. Should we NAT the traffic from both the public and private cluster subnets, or is it only the public clusters that communicates with the control plane?