Search code examples
google-kubernetes-enginegke-networking

Configuring Global Access for GKE Ingress Controller


I am trying to configure global access for the Internal Load Balancer provisioned by the GKE Ingress Controller to enable access from all GCP regions.

This is easy enough to do with the "networking.gke.io/internal-load-balancer-allow-global-access: "true"" annotation in the service YAML while setting up an Internal Load Balancer service.

However, I cannot find any documentation on how to specify a similar annotation while defining an Ingress YAML.

Patching the forwarding rules created once the ingress is deployed is not an option due to my security setup - I need a solution that works while deploying the ingress in GKE.

Thank you so much for your help!


Solution

  • Internal GKE Ingress actually provisions an Internal HTTPS load balancers which is not the same as the internal TCP/UDP load balancer created for K8s Services with "Type: Load Balancer". Unlike internal TCP/UDP load balancers, the interna HTTPS load balancer does not yet support global access.