LKE LoadBalancer or Ingress for an internal network only?

I need two LKE clusters. One of them for production and second for development environment. The second cluster must be only for an internal network (192.168.128.0/17). If I use LoadBalancer or Ingress, it is implemented by Nodebalancers and has an external IP always. So how to set up LoadBalancer or Ingress for an internal network only?

1 Reply

Hey @mikleand! So, the short answer is yes, you can. However, you will need to employ a workaround at this time. By the end of the year, private VLANs will be available and will make this process a bit simpler. For now, you can follow the below steps.

  • Deploy an Ingress controllerand set its service type to NodePort
  • Manually deploy a Linode running HAProxy or Nginx
  • Make the backends for all Nodes in the cluster point to the NodePort of the Ingress controller
  • Create a Calico network policy to restrict inbound traffic on the Ingress controller to the LoadBalancer

Hope this helps and feel free to followup with any questions!

Reply

Please enter an answer
Tips:

You can mention users to notify them: @username

You can use Markdown to format your question. For more examples see the Markdown Cheatsheet.

> I’m a blockquote.

I’m a blockquote.

[I'm a link] (https://www.google.com)

I'm a link

**I am bold** I am bold

*I am italicized* I am italicized

Community Code of Conduct