Lab 11.2. Is it possible to connect AWS Loadbalancer to ingress cotroller's service?
Is it possible to connect AWS Loadbalancer to ingress cotroller's service having AWS EC2 instances as CP and worker nodes and Kates installed via kubeadm? (not EKS)
Because in this lab we have EXTERNAL IP in constantly pending state:
ubuntu@k8scp:~$ kubectl get svc myingress-ingress-nginx-controller NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE myingress-ingress-nginx-controller LoadBalancer 10.103.55.79 <pending> 80:31269/TCP,443:31271/TCP 42m
It means that we can use only Ingress Controller's Node Port to connect to our applications from outside, what, in turn, means that we can use only 30000-32767 port range for connection and it is not something that we can call secure, because we get direct access to Kuber nodes.
NOTE: I understand that this is possible using AWS EKS, but question is about EC2 instances with Kates installed by kubeadm.
Answers
-
Hi @oleksazhel,
For the LoadBalancer service type to work as expected, a Cloud Controller Manager would need to be deployed to the cluster. Documentation is not very clear about custom CCMs, typically it directs to Amazon EKS or GKE cloud services. I have attempted a simple LoadBalancer service on GCE, but did not work...
The ExternalIP may work as an alternative though.Regards,
-Chris0 -
@chrispokorni Yes Chris, I found out the same and also tried ExternalIP pointing to IP address of manually created ALB (to internal or external IP doesn't matter), but got no success. So let's consider this is not possible without CCM.
0 -
Hi @oleksazhel,
I just came across the following forum post, slightly off-topic but may still be relevant:
Regards,
-Chris0 -
Thanks @chrispokorni Chris, yeah I considered usage of MetalLB, but it won't use AWS ALB/NLB. AFAIK it is for not cloud related, but for standalone Kates cluster.
0
Categories
- All Categories
- 177 LFX Mentorship
- 177 LFX Mentorship: Linux Kernel
- 750 Linux Foundation IT Professional Programs
- 373 Cloud Engineer IT Professional Program
- 169 Advanced Cloud Engineer IT Professional Program
- 74 DevOps IT Professional Program - Discontinued
- 4 DevOps & GitOps IT Professional Program
- 99 Cloud Native Developer IT Professional Program
- 7.6K Training Courses & Learning Paths
- 1 AI & ML Training
- 1 Blockchain & Decentralized Identity Training
- 5 Cloud & Containers Training
- 1 Cybersecurity Training
- 2 DevOps & Site-Reliability Training
- 1 Linux Kernel Development Training
- 1 Networking Training
- 2 Open Source Best Practice Training
- 1 System Administration Training
- 1 System Engineering Training
- 1 Web & Application Development Training
- 792 Hardware
- 202 Drivers
- 68 I/O Devices
- 37 Monitors
- 95 Multimedia
- 173 Networking
- 91 Printers & Scanners
- 87 Storage
- 769 Linux Distributions
- 81 Debian
- 68 Fedora
- 22 Linux Mint
- 13 Mageia
- 24 openSUSE
- 150 Red Hat Enterprise
- 31 Slackware
- 13 SUSE Enterprise
- 356 Ubuntu
- 465 Linux System Administration
- 31 Cloud Computing
- 73 Command Line/Scripting
- Github systems admin projects
- 98 Linux Security
- 78 Network Management
- 101 System Management
- 46 Web Management
- 106 Mobile Computing
- 18 Android
- 73 Development
- 1.2K New to Linux
- 1K Getting Started with Linux
- 392 Off Topic
- 121 Introductions
- 181 Small Talk
- 29 Study Material
- 956 Programming and Development
- 310 Kernel Development
- 628 Software Development
- 984 Software
- 376 Applications
- 182 Command Line
- 5 Compiling/Installing
- 68 Games
- 317 Installation
- Archived
- 2 LFD140 Class Forum
- 1.4K LFS258 Class Forum
Upcoming Training
-
August 20, 2018
Kubernetes Administration (LFS458)
-
August 20, 2018
Linux System Administration (LFS301)
-
August 27, 2018
Open Source Virtualization (LFS462)
-
August 27, 2018
Linux Kernel Debugging and Security (LFD440)