kubernetes-sigs / kubernetes-sigs/aws-load-balancer-controller
Support AWS Shield advanced on NLBs not part of ingress controller
- Dominant language
- Go
- Stars
- 4.3k
- Forks
- 1.6k
- Avg merge
- 1d 15h
- Merged PRs (30d)
- 6
Description
Currently the ALB controller supports an annotation to enable AWS Shield Advanced for ALB / Ingress resource.
alb.ingress.kubernetes.io/shield-advanced-protection
AWS Shield Advanced is also available for NLBs, it would be great if you could provide and annotation and support for enabling of shield-advanced-protection on NLBs created using the service resource. I guess it would also need to provision an elastic IP, linked to the NLB, for advanced shield to work.
Contributor guide
Research direction
Start by tracing the existing ALB/Ingress support for the alb.ingress.kubernetes.io/shield-advanced-protection annotation, then follow how NLBs are created from Service resources. Check the AWS Shield Advanced requirements for NLBs and elastic IPs; done means Service-created NLBs can enable the requested protection through an annotation with any required IP association handled.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, go, kubernetes
- Domain
- cloud, networking
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100