add option to run cluster inside a private subnet within a VPC where public dns is not an option