LKE LoadBalancer or Ingress for an internal network only?
I need two LKE clusters. One of them for production and second for development environment. The second cluster must be only for an internal network (192.168.128.0/17). If I use LoadBalancer or Ingress, it is implemented by Nodebalancers and has an external IP always. So how to set up LoadBalancer or Ingress for an internal network only?
Hey @mikleand! So, the short answer is yes, you can. However, you will need to employ a workaround at this time. By the end of the year, private VLANs will be available and will make this process a bit simpler. For now, you can follow the below steps.
- Deploy an Ingress controllerand set its service type to NodePort
- Manually deploy a Linode running HAProxy or Nginx
- Make the backends for all Nodes in the cluster point to the
NodePortof the Ingress controller
- Create a Calico network policy to restrict inbound traffic on the Ingress controller to the LoadBalancer
Hope this helps and feel free to followup with any questions!