Does anyone know how to get access to a load balan...
# aws
f
Does anyone know how to get access to a load balancer (either ALB or NLB) that was created by EKS? This is a bit of an issue where almost everything is created by Pulumi except the load balancer, I was hoping Pulimi would have something for this, but it just redirects you to the controller you’re supposed to install. The reason this is an issue, is because I want to get access to the load balancer from Pulumi, but I can’t see how. We don’t get name or an arn and there is now way to get via tags.
s
You talking the alb ingress controller? That should be managed via the helm template
f
That’s not relevant.
s
Can you explain your issue further? I do not work for Pulumi, just trying to help from a community stand point.
f
Well, it’s a resource created outside the scope of Pulumi, but it needs to be reigned back in. Since we’re using Pulimi as infrastructure code (same issue with Terraform though).
s
Right but the alb ingress controller is where you manage your routes and connections not directly through building your own alb
f
Since the ALB Controller creates a load balancer, how can we reference that load balancer in Pulimi and how do we know it’s ready?
Dude, that’s exactly the issue, there is no way.
ALB Controller doesn’t have a way to 1) Be referenced in Pulimi uniquely 2) Tell us when its up.
s
So depending how its deployed, public facing or internal you could have a post hook to test if the sites accesible. I would still manage this through k8 provider
f
Again, to reiterate, you don’t know what the LB is called, nor do you have a way to reference it, not to mention knowing if its up. That’s the whole issue dude.
s
Ill keep this thread for notifications. You technically dont need to pull it into pulumi sinces its a manged service with an iam role to manage your alb eks stood up.
f
Dude are you for real? You do, if you need access to the zoneID for Route53, or to create metrics in Cloud Watch, or in general if you want to know if something went wrong during the CI step which is its main purpose.
f
Yeah I am aware of external-dns, again we need it for other stuff, but you still don’t understand: There are dependencies on making sure the ALB is up and running and in a valid state, and we need to setup metrics that needs access to the ALB, Cloud Watch is one aspect, prometheus is another, and etc. These aren’t solutions.