如何解决如何将安全组附加到EKS群集中的负载均衡器?
我们在AWS中拥有一个EKS 1.17 Kubernetes集群,我正在尝试使用附带的安全组创建一个负载均衡器,以允许对流量策略进行控制。
根据this link,应有注释service.beta.kubernetes.io/aws-load-balancer-extra-security-groups
,当在类型LoadBalancer
的服务中指定时,该注释应完全允许。当我应用服务模板时,将创建负载均衡器,但是没有附加安全组。 (请参见下面的模板和结果)
我研究了little bit of source code,在某些旧文件中有这种可能性,但是似乎在更高版本中缺少此代码。此功能的状态如何?是否有其他自动化解决方案可让我创建带有安全组的负载均衡器?
模板:
apiVersion: v1
kind: Service
metadata:
annotations:
service.beta.kubernetes.io/aws-load-balancer-extra-security-groups: sg-0fed8ca44df49ad59
service.beta.kubernetes.io/aws-load-balancer-type: nlb
creationTimestamp: null
finalizers:
- service.kubernetes.io/load-balancer-cleanup
labels:
app: nginx-ingress
chart: nginx-ingress-1.40.3
component: controller
heritage: Helm
release: nginx-internal
name: nginx-internal-nginx-ingress-controller
selfLink: /api/v1/namespaces/ingress/services/nginx-internal-nginx-ingress-controller
spec:
externalTrafficPolicy: Cluster
ports:
- name: http
nodePort: 32283
port: 80
protocol: TCP
targetPort: http
- name: https
nodePort: 30485
port: 443
protocol: TCP
targetPort: https
selector:
app: nginx-ingress
app.kubernetes.io/component: controller
release: nginx-internal
sessionAffinity: None
type: LoadBalancer
结果:
$> aws elbv2 describe-load-balancers --profile cwp-test-admin --names ab45172b455c8471aafce3bb590963a0
{
"LoadBalancers": [
{
"LoadBalancerArn": "arn:aws:elasticloadbalancing:eu-central-1:291004035372:loadbalancer/net/ab45172b455c8471aafce3bb590963a0/e3865ad5129b8c6f","DNSName": "ab45172b455c8471aafce3bb590963a0-e3865ad5129b8c6f.elb.eu-central-1.amazonaws.com","CanonicalHostedZoneId": "Z3F0SRJ5LGBH90","CreatedTime": "2020-08-18T11:19:22.129Z","LoadBalancerName": "ab45172b455c8471aafce3bb590963a0","Scheme": "internet-facing","VpcId": "vpc-0ab00d7cc01d6f870","State": {
"Code": "active"
},"Type": "network","AvailabilityZones": [
{
"ZoneName": "eu-central-1b","SubnetId": "subnet-0aa1554d7ba6d766a","LoadBalancerAddresses": []
},{
"ZoneName": "eu-central-1a","SubnetId": "subnet-0eabf8d5fabfac6be","LoadBalancerAddresses": []
}
],"IpAddressType": "ipv4"
}
]
}
版权声明:本文内容由互联网用户自发贡献,该文观点与技术仅代表作者本人。本站仅提供信息存储空间服务,不拥有所有权,不承担相关法律责任。如发现本站有涉嫌侵权/违法违规的内容, 请发送邮件至 dio@foxmail.com 举报,一经查实,本站将立刻删除。