Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Percona Everest needs option to specify creation of Internet-facing or internal load-balancer #914

Open
telderfts opened this issue Dec 9, 2024 · 1 comment

Comments

@telderfts
Copy link

Currently when creating a database cluster in Percona Everest you can expose the database to traffic outside of the VPC. Right now it appears that Percona Everest simply changes the service type and adds an annotation to be an NLB. There needs to be an option for the Load-balancer to be internet-facing, which is the default, or Internal facing which is more secure for those with a cloud environment, especially in AWS. This should be as easy as including an annotation that specifies whether or not it is internal and either a drop down or check-box when making the database externally accessible.

@telderfts
Copy link
Author

To add more context, for instance in AWS, if you want to use an internal load balancer you have to leave external access turned off and then manually change the mysql-haproxy service to LoadBalancer with the annotations for Internal load balancing which seems to defeat the entire purpose of allowing external access. Most users don't want their DB's open to public traffic where they are paying for data transfer costs if the app connecting to the DB is located in a different VPC.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant