cloud-on-k8s icon indicating copy to clipboard operation
cloud-on-k8s copied to clipboard

Published 20 hours ago • verified publisher icon elastic

Document how to set up AWS ALB with ECK

Open pebrc opened this issue 5 years ago • 3 comments

We support EKS as a k8s service but we are currently not documenting how to setup an Ingress with an AWS ALB. While this might seem out of scope of what ECK does there are two challenges that make it worthwhile to add additional documentation around that:

  • ALBs require an unauthenticated endpoint for their health checks
  • We deploy Elasticsearch by default with self-signed certificates which we cannot configure into the ALB

The goal of this issue is to explore workarounds and document a working configuration in the docs.

https://discuss.elastic.co/t/does-elastic-have-a-healthcheck-endpoint-that-does-not-require-username-and-password/217090

pebrc avatar Jan 30 '20 16:01 pebrc

@pebrc Hi 👋 Is this being looked at the moment ? We are currently using AWS ALB with EKS and want to configure the Elasticsearch health check.

One option would be do as below but not great. Is there any other option you guys are thinking about ?

alb.ingress.kubernetes.io/success-codes: '401'
alb.ingress.kubernetes.io/healthcheck-path" = "/_cat/health"

nitinprabhu avatar Oct 15 '20 15:10 nitinprabhu

I think may better to keep as

alb.ingress.kubernetes.io/success-codes: '200'
alb.ingress.kubernetes.io/healthcheck-path" = "/login"

sreedharbukya avatar Feb 23 '21 05:02 sreedharbukya

Which one is the best?

ricardorqr avatar Aug 11 '23 21:08 ricardorqr