NVIDIA / holodeck / 23791782575

48%

push

github

fix: switch HA NLB to internal scheme to fix hairpin routing (#746) (#760)

The internet-facing NLB resolves to a public IP. When control-plane
nodes connect to it after kubeconfig switchover, the hairpin routing
(node → IGW → NLB → same node) is not supported by AWS NLBs, causing
i/o timeouts on port 6443.

Switch to an internal NLB which gets a private VPC IP, routing traffic
directly within the VPC. Also remove the NLB DNS propagation wait since
internal NLBs resolve immediately via VPC DNS.

Fixes #746

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>

0 of 4 new or added lines in 1 file covered. (0.0%)

4975 of 10863 relevant lines covered (45.8%)

0.51 hits per line