Error from server: Get "https://10.0.0.96:10250/containerLogs/...": remote error: tls: internal error

Hello,

Newbie to EKS here.

I've just provisioned a new EKS cluster on a private subnet. I could get a pod running on the cluster, however when I try to exec into its bash or get its log, I always get:

$ kubectl logs shell
Error from server: Get "https://10.0.0.96:10250/containerLogs/external/shell/shell": remote error: tls: internal error

$ kubectl exec -it shell  -- bash
Error from server: error dialing backend: remote error: tls: internal error

(the pod is called shell under namespace external)

In the EKS console I see add-ons are all degraded...see https://files.slack.com/files-pri/T09NY5SBT-F03DZNVDEEP/image.png for screenshot.

Some findings:

$kubectl get certificatesigningrequests.certificates.k8s.io
NAME        AGE    SIGNERNAME                      REQUESTOR                                      REQUESTEDDURATION   CONDITION
csr-chlmr   121m   kubernetes.io/kubelet-serving   system:node:i-02a4c9ad44d2e5520.ec2.internal   <none>              Approved

$ kubectl get pods --all-namespaces
NAMESPACE     NAME                      READY   STATUS    RESTARTS   AGE
external      shell                     1/1     Running   0          125m
kube-system   aws-node-jqt5z            1/1     Running   0          122m
kube-system   coredns-7f5998f4c-mskbm   1/1     Running   0          132m
kube-system   coredns-7f5998f4c-ntbgt   1/1     Running   0          132m
kube-system   kube-proxy-mrnmp          1/1     Running   0          122m

Can someone please give me some hints on where I should look at?

Thanks!