Argocd break in multi-cluster when whitelisting public ip

[kimhan9]

I have follow to example to setup multi-cluster hub and spoke eks
https://github.com/gitops-bridge-dev/gitops-bridge/tree/main/argocd/iac/terraform/examples/eks/multi-cluster/hub-spoke

Everything works well until I added IP in eks public access source allowlist. Argocd unable to connect to other cluster though I have enable both private and public endpoint, and allow all in security group.

Why argocd keep using public endpoint thought private endpoint is enable? It seem only work on public allow all.