Is it possible to setup LKE in VPC/Subnet
Hi,
I am trying to setup a k8s cluster on vpc/subnet.
Overall Design
A vpc with two subnets has been created: public-subnet and private-subnet.
The public-subnet will host proxy, vpn etc.
The private-subnet(s) will host database, MQ, Cache and the application micro services.
Issue
I am trying to create a k8s cluster on the private subnet. There seems to be no direct option to specify vpc or subnet. so I created the cluster and updated the eth0 to private subnet. This causes various network issues and the cluster becomes unusable. I guess that is to be expected as it is not a documented procedure.
The documentation that can be found related to "securing LKE" is:
https://techdocs.akamai.com/cloud-computing/docs/getting-started-with-lke-linode-kubernetes-engine#general-network-and-firewall-information
But there is no documentation on how it can be configured to talk to vpc/subnets.
Question
Is there any way to create k8s in the private subnet and enable the micro-services running k8s to access other resources like DB,MQ etc on the same private subnet using local ip?
This seems like a typical use case. Any help is much appreciated.
4 Replies
hdiep
Linode Staff
At this time LKE services aren't able to be conjoined with a VPC. Only Compute Instances can join VPC networks but I've taken note of your interest.
Our VPC service is still new so services to be added and new implementations are always being worked on. LKE services being apart of a VPC is one that's on our radar and I'm sure your interest will help push for completion. I'm not sure on when the completion will be but we'll make it known within our blog site when done.
In the meantime, there is a workaround that you can use, our VLAN product. You'll want to use a VLAN as a VPC. This will require some configuration changes on your end, but I've found a great walk through from another user who was able to accomplish a similar task using VLAN as a VPC: Private Networking for LKE Clusters and Dependent Systems Using VLANs on Akamai Cloud Compute.
The best approach depends on your cloud provider, but generally, specifying VPC and subnet details during cluster creation, setting up correct network policies, and ensuring proper routing between services using private IPs should help.
