k8s-service: How to launch the load balancer in private subnet?

[yorinasub17]

I want make sure the ALB launched with the Kubernetes service backed by k8s-service will launch in private subnets. How do I do that?

---

Tracked in ticket #109229

[yorinasub17]

The load balancer is controlled by the AWS Load Balancer Controller, and you can control the configuration of the LB that is launched through the many annotations that it understands. Here is a link to the full annotation: https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.4/guide/ingress/annotations/

You can add any annotation that we don’t support within the k8s-service module using the ingress_annotations input variable.

With that said, for your particular question, setting the expose_type to internal should set the annotations for configuring an internal ALB that is only exposed to the VPC, which should accomplish your needs.