入口注釋預置不必要的AWS經典負載均衡器

在我的 AWS EKS 集群中，使用 Ingress 物件上的注釋預置 AWS 應用程式負載均衡器。此外，還配置了一個不必要的經典負載均衡器。關于如何防止這種情況的任何想法或最佳實踐？

resource "kubernetes_service" "api" {
  metadata {
     name = "${var.project_prefix}-api-service"
  }
  spec {
    selector = {
      app = "${var.project_prefix}-api"
    }
    port {
      name = "http"
      port        = 80
      target_port = 1337
    }
    port {
      name = "https"
      port = 443
      target_port = 1337
    }
    type = "LoadBalancer"
  }
}

resource "kubernetes_ingress" "api" {
  wait_for_load_balancer = true
  metadata {
    name = "${var.project_prefix}-api"
    annotations = {
      "kubernetes.io/ingress.class" = "alb"
      "alb.ingress.kubernetes.io/scheme" = "internet-facing"
      "alb.ingress.kubernetes.io/target-type" = "instance"
      "alb.ingress.kubernetes.io/certificate-arn" = local.api-certificate_arn
      "alb.ingress.kubernetes.io/load-balancer-name" = "${var.project_prefix}-api"
      "alb.ingress.kubernetes.io/listen-ports" = "[{\"HTTP\": 80}, {\"HTTPS\":443}]"
      "alb.ingress.kubernetes.io/actions.ssl-redirect" = "{\"Type\": \"redirect\", \"RedirectConfig\": { \"Protocol\": \"HTTPS\", \"Port\": \"443\", \"StatusCode\": \"HTTP_301\"}}"
    }
  }
  spec {
    backend {
      service_name = kubernetes_service.api.metadata.0.name
      service_port = 80
    }
    rule {
      http {
        path {
          path = "/*"
           backend {
            service_name = "ssl-redirect"
            service_port = "use-annotation"
          }
        }
      }
     }
  }
}

uj5u.com熱心網友回復：

您的 LoadBalancer 服務負責部署經典的負載均衡器，如果您只需要應用程式負載均衡器，則沒有必要。

resource "kubernetes_service" "api" {
  metadata {
     name = "${var.project_prefix}-api-service"
  }
  spec {
    selector = {
      app = "${var.project_prefix}-api"
    }
    port {
      name = "http"
      port        = 80
      target_port = 1337
    }
    port {
      name = "https"
      port = 443
      target_port = 1337
    }
    type = "ClusterIP"
  }
}

resource "kubernetes_ingress" "api" {
  wait_for_load_balancer = true
  metadata {
    name = "${var.project_prefix}-api"
    annotations = {
      "kubernetes.io/ingress.class" = "alb"
      "alb.ingress.kubernetes.io/scheme" = "internet-facing"
      "alb.ingress.kubernetes.io/target-type" = "instance"
      "alb.ingress.kubernetes.io/certificate-arn" = local.api-certificate_arn
      "alb.ingress.kubernetes.io/load-balancer-name" = "${var.project_prefix}-api"
      "alb.ingress.kubernetes.io/listen-ports" = "[{\"HTTP\": 80}, {\"HTTPS\":443}]"
      "alb.ingress.kubernetes.io/actions.ssl-redirect" = "{\"Type\": \"redirect\", \"RedirectConfig\": { \"Protocol\": \"HTTPS\", \"Port\": \"443\", \"StatusCode\": \"HTTP_301\"}}"
    }
  }
  spec {
    backend {
      service_name = kubernetes_service.api.metadata.0.name
      service_port = 80
    }
    rule {
      http {
        path {
          path = "/*"
           backend {
            service_name = "ssl-redirect"
            service_port = "use-annotation"
          }
        }
      }
     }
  }
}

標籤：亚马逊网络服务 Kubernetes 亚马逊-eks aws-负载均衡器

上一篇：由于配置錯誤，執行失敗：APIGateway沒有權限承擔提供的角色arn:aws:iam::XXXXXXXXXXXX:role/auth

下一篇：洗掉后可以使用云形成堆疊名稱嗎？