Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update other dev templates to leverage ILB solution #5260

Open
Tracked by #5257
nawazkh opened this issue Nov 11, 2024 · 2 comments
Open
Tracked by #5257

Update other dev templates to leverage ILB solution #5260

nawazkh opened this issue Nov 11, 2024 · 2 comments
Labels
help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.

Comments

@nawazkh
Copy link
Member

nawazkh commented Nov 11, 2024

Self hosted clusters are leveraging ILB solution to custom resolve workload cluster's API server DNS name with internal IP of the ILB.
We do this by updating the /etc/hosts of the worker nodes of the workload cluster.

Since other templates do not necessarily use VM, instead use VMSS etc, we should carry over the internal IP ILB solution to other dev templates as well.

@junkiebev
Copy link

junkiebev commented Nov 11, 2024

In the event that this is done, it's no longer required to create the private DNS zone or the records in it (as far as I can tell), however it doesn't appear possible to "opt out" of the private dns zone being created at present if the AzureCluster.spec.networkSpec.apiServerLB.type is set to Internal

@nawazkh nawazkh added the help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines. label Nov 12, 2024
@nawazkh
Copy link
Member Author

nawazkh commented Nov 12, 2024

In the event that this is done, it's no longer required to create the private DNS zone or the records in it

Do you mean once a template is deployed by an MS tenant (SFI restrictions), a MS dev doesn't need to deploy a private DNS Zone and create a record in the private dns zone once the VNets(management and workload cluster's) are peered ?

however it doesn't appear possible to "opt out" of the private dns zone being created at present if the AzureCluster.spec.networkSpec.apiServerLB.type is set to Internal

I.. don't fully understand this.
"private dns zone" fix is being added only to the tilt workflow for local development.
A new user who is not a MS Tenant, or the tests hosted in test grid, do not need to have a private dns zone work around to work with CAPZ.

Can you please elaborate your thought ?

To add more context: A load balancer of type Internal is created for all flavors of CAPZ unless the flavor is of type "private".

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help wanted Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.
Projects
Status: Todo
Development

No branches or pull requests

2 participants