Describe the bug
When trying to create Kubernetes Ingress with AWS Load Balancer Controller, no Elastic Load Balancer is deployed. Error logs (retrieved by running kubectl logs -n kube-system deployment.apps/aws-load-balancer-controller):
logs.txt
Steps to reproduce
I'm trying to create an Application Load Balancer on intranet subnets (subnets with transitive gateway to corporate network). These subnets do not have any internet access. Besides these, there are also private subnets within the VPC.
I have marked all intranet subnets with kubernetes.io/role/internal-elb=1 and kubernetes.io/cluster/eks-ilz=owned
Private subnets have no such tags.
For Kubernetes I am using EKS, provisioned by official terraform provider resources only. For the cluster I have one t3-large node instance.
Describe the bug When trying to create Kubernetes Ingress with AWS Load Balancer Controller, no Elastic Load Balancer is deployed. Error logs (retrieved by running
kubectl logs -n kube-system deployment.apps/aws-load-balancer-controller
): logs.txtSteps to reproduce I'm trying to create an Application Load Balancer on intranet subnets (subnets with transitive gateway to corporate network). These subnets do not have any internet access. Besides these, there are also private subnets within the VPC.
I have marked all intranet subnets with kubernetes.io/role/internal-elb=1 and kubernetes.io/cluster/eks-ilz=owned Private subnets have no such tags.
For Kubernetes I am using EKS, provisioned by official terraform provider resources only. For the cluster I have one t3-large node instance.
For addons on the EKS I have:
To my understanding, EKS Pod Identity Agent addon is responsible with linking the AWS IAM Role with the Kubernetes Service account. The policy used within the AWS Load Balancer Controller IAM Role is the same as the one found at https://raw.githubusercontent.com/kubernetes-sigs/aws-load-balancer-controller/v2.8.1/docs/install/iam_policy.json (as per the official documentation - https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.8/deploy/installation/)
I did not try to configure IRSA, kube2iam or EKS OIDC providers.
I have forked public.ecr.aws/eks/aws-load-balancer-controller:v2.8.1 and added to my private ecr repository so the kubernetes pods can reach it.
I install AWS Load Balancer Controller via helm install:
I try to setup a Deployment, LoadBalancer and Ingress with these Kubernetes manifests:
Expected outcome An Application Load Balancer should be deployed pointing to the kubernetes ingress. However, there is no such deployment available:
Environment
Additional Context: Helm chart used to install AWS Load Balancer Controller version: 1.8.1