https://pulumi.com logo
Title
f

flat-insurance-25294

02/12/2021, 8:19 AM
Does anyone know how to get access to a load balancer (either ALB or NLB) that was created by EKS? This is a bit of an issue where almost everything is created by Pulumi except the load balancer, I was hoping Pulimi would have something for this, but it just redirects you to the controller you’re supposed to install. The reason this is an issue, is because I want to get access to the load balancer from Pulumi, but I can’t see how. We don’t get name or an arn and there is now way to get via tags.
s

strong-plastic-28250

02/12/2021, 4:33 PM
You talking the alb ingress controller? That should be managed via the helm template
f

flat-insurance-25294

02/12/2021, 4:34 PM
That’s not relevant.
s

strong-plastic-28250

02/12/2021, 4:40 PM
Can you explain your issue further? I do not work for Pulumi, just trying to help from a community stand point.
f

flat-insurance-25294

02/12/2021, 4:40 PM
Well, it’s a resource created outside the scope of Pulumi, but it needs to be reigned back in. Since we’re using Pulimi as infrastructure code (same issue with Terraform though).
s

strong-plastic-28250

02/12/2021, 4:41 PM
Right but the alb ingress controller is where you manage your routes and connections not directly through building your own alb
f

flat-insurance-25294

02/12/2021, 4:41 PM
Since the ALB Controller creates a load balancer, how can we reference that load balancer in Pulimi and how do we know it’s ready?
Dude, that’s exactly the issue, there is no way.
ALB Controller doesn’t have a way to 1) Be referenced in Pulimi uniquely 2) Tell us when its up.
s

strong-plastic-28250

02/12/2021, 4:44 PM
So depending how its deployed, public facing or internal you could have a post hook to test if the sites accesible. I would still manage this through k8 provider
f

flat-insurance-25294

02/15/2021, 11:34 AM
Again, to reiterate, you don’t know what the LB is called, nor do you have a way to reference it, not to mention knowing if its up. That’s the whole issue dude.
s

strong-plastic-28250

02/15/2021, 4:36 PM
Ill keep this thread for notifications. You technically dont need to pull it into pulumi sinces its a manged service with an iam role to manage your alb eks stood up.
f

flat-insurance-25294

02/15/2021, 4:38 PM
Dude are you for real? You do, if you need access to the zoneID for Route53, or to create metrics in Cloud Watch, or in general if you want to know if something went wrong during the CI step which is its main purpose.
f

flat-insurance-25294

02/15/2021, 4:40 PM
Yeah I am aware of external-dns, again we need it for other stuff, but you still don’t understand: There are dependencies on making sure the ALB is up and running and in a valid state, and we need to setup metrics that needs access to the ALB, Cloud Watch is one aspect, prometheus is another, and etc. These aren’t solutions.