aws / aws/containers-roadmap

[EKS] [request]: Allow Auto Mode TargetGroupBinding to update target groups in other VPCs

Open
#2,730 0 comments 4 reactions 0 assignees View on GitHub
EKS EKS Auto Mode Proposed
Dominant language
Shell
Stars
5.4k
Forks
334
PR merge metrics
No merged PRs in 30d

Description

### Community Note

* Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request
* Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
* If you are interested in working on this issue or have submitted a pull request, please leave a comment

**Tell us about your request**

**Which service(s) is this request for?**
EKS Auto Mode

**Tell us about the problem you're trying to solve. What are you trying to do, and why is it hard?**

Like #2508, this is related to using `TargetGroupBinding`s to register in-cluster targets to be used by an external load balancer; the reasons for which are explained well in the linked issue.

In my case, I have all my ingress resources, including load balancers, in a separate VPC. To be able to direct traffic to EKS targets from there, the target group must be in the same VPC, and the TargetGroupBinding must be able to add its targets to it.

I have an existing cluster with Load Balancer Controller installed using the [Helm chart](https://github.com/aws/eks-charts/tree/master/stable/aws-load-balancer-controller) (`vpcId` configuration value set to the ingress VPC ID - this doesn't seem to be used for anything any more) where this works fine. The [documentation](https://kubernetes-sigs.github.io/aws-load-balancer-controller/latest/guide/targetgroupbinding/targetgroupbinding/#vpcid) mentions a `vpcID` value in the CRD, but this is not part of the Auto Mode CRD `targetgroupbindings.eks.amazonaws.com`.

When trying to register targets on a target group in a different VPC, the following message appears in CloudTrail:

> You must specify a valid Availability Zone or select 'all' for all enabled Availability zones, since the IP address '10.x.x.x' is outside the VPC

**Are you currently working around this issue?**
No

**Attachments**

[CloudTrail event](https://github.com/user-attachments/files/24258001/ct.json)

Contributor guide

Open the contributing guide

Research direction

Start with linked issue #2508 and the TargetGroupBinding vpcID documentation and Auto Mode CRD references. Inspect the attached CloudTrail event to confirm the current cross-VPC failure. Done means Auto Mode TargetGroupBinding can register targets in a target group from another VPC.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, kubernetes
Domain
cloud, infrastructure, networking
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.