Guidance to create NLB creation using Ingress

Question

I'm reaching out to the AWS community for assistance. Thank you!

I'm trying to set up an internal-facing NLB using Ingress. After applying the provided Ingress manifest, I've observed that the NLB endpoint appears to be empty. Are there any prerequisites I should ensure are in place before proceeding?

### ingress-manifest.yaml ###
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: ingress-service-nlb
  namespace: tresleai
  annotations:
    kubernetes.io/ingress.class: "nlb"
    #kubernetes.io/role/internal-elb: 1
    service.beta.kubernetes.io/aws-load-balancer-type: "internal"
    service.beta.kubernetes.io/aws-load-balancer-internal: "true"
    service.beta.kubernetes.io/aws-load-balancer-nlb-target-type: "instance"
    service.beta.kubernetes.io/aws-load-balancer-ssl-cert: "arn:aws:acm:us-east-2:XYZ"
    service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "443"
    service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy: "ELBSecurityPolicy-2016-08"
    nlb.ingress.kubernetes.io/security-groups: "sg-8edf9b29776"
    service.beta.kubernetes.io/aws-load-balancer-scheme: "internal"
    service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
    nlb.ingress.kubernetes.io/scheme: "internal"
spec:
  rules:
    - host: service.test.ai
      http:
        paths:
          - path: /
            pathType: Prefix
            backend:
              service:
                name: test-service
                port:
                  number: 80

I have added the IAM policy - Loadbalancer
{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "elasticloadbalancing:CreateLoadBalancer",
                "elasticloadbalancing:DeleteLoadBalancer",
                "elasticloadbalancing:ModifyLoadBalancerAttributes",
                "elasticloadbalancing:RegisterTargets",
                "elasticloadbalancing:DeregisterTargets"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "elasticloadbalancing:DescribeLoadBalancers",
                "elasticloadbalancing:DescribeTags"
            ],
            "Resource": "*"
        }
    ]
}

Answer

This has created Application type (internal facing) using Ingress.

I have made two changes, have added these two annotations
-     alb.ingress.kubernetes.io/load-balancer-type: nlb
-     kubernetes.io/ingress.class: "alb"

Wondering how to deploy an internal facing NLB using Ingress manifest file?

Answer

Ingress manifest file is used to create ALB (L7 load balancer), not NLB (L4 load balancer).

You can read more about it [here](https://docs.aws.amazon.com/eks/latest/userguide/network-load-balancing.html) and [here]().

To create (internal) NLB you need to use the Service manifest instead with `type: LoadBalancer`. for example:
```
apiVersion: v1
kind: Service
metadata:
  name: my-internal-nlb-service
  annotations:
    service.beta.kubernetes.io/aws-load-balancer-type: external
    service.beta.kubernetes.io/aws-load-balancer-scheme: "internal"  # Make the NLB internal
spec:
  type: LoadBalancer
  ports:
  - port: 80
    targetPort: 80
    protocol: TCP
  selector:
    app: my-app
```

Guidance to create NLB creation using Ingress

ingress-manifest.yaml

Relevant content