CODEWITHSUNDEEP
amazon-web-serviceskubernetesamazon-eksnlbalpn
riccardogabellone
riccardogabellone

Reputation: 288

k8s Service annotations for AWS NLB ALPN

I'm facing an issue on the Service annotation that enables ALPN policy in an AWS load balancer. I'm testing an application in production, managed by EKS. I need to enable a Network Load Balancer (NLB) on AWS to manage some ingress rules (tls cert and so on...). Among annotations is available:

service.beta.kubernetes.io/aws-load-balancer-alpn-policy: HTTP2Preferred

I think I need this to enable ALPN in the TLS handshake.

The issue is that it does not apply to my load balancer (other annotations works), I can confirm it by accessing the AWS dashboard or by executing curl -s -vv https://my.example.com. To enable this ALPN policy I must apply this patch manually, e.g. through the dashboard.

What am I missing? I wonder if that annotation could only be available for the load balancer controller and not for the base Service for NLBs.

EDIT: I found some github issues that requested for this feature in the legacy mode without using a third party controller, here is a comment that resumes all. Since it seems to be an unavailable feature (for now), how can I achieve the configuration result using terraform for example? Do I need to create the NLB first and then attach to my Service?

Upvotes: 2

Views: 348

Answers (0)

Related Questions