Consul on EKS using nginx as ingress (transparent mode)

requirements

• an AWS account and a region that support EKS
• environment variables to access AWS account locally
• eksctl installed locally
• kubectl installed locally
• helm installed locally

Installation

Deploy an EKS cluster:

eksctl create cluster --name=<cluster name> --region=<region> --nodes=3 --version 1.21

Import kubectl config

aws eks update-kubeconfig --region <region> --name <cluster name>

Deploy Consul

helm repo add hashicorp https://helm.releases.hashicorp.com
helm install consul hashicorp/consul --values consul-values.yaml --create-namespace --namespace consul

Add deny all intention

kubectl apply -f denyall.yaml

Deploy nginx ingress

helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx
helm upgrade --install ingress-nginx ingress-nginx \                                                                                                    ─╯
  --repo https://kubernetes.github.io/ingress-nginx \
  --namespace ingress-nginx --create-namespace --values nginxingress-values.yaml

Add configuration for Dialed Directly

kubectl apply -f sd-direct.yaml

Add configuration for ingress config to static-server. If there are issues with validating the ingress object see kubernetes/ingress-nginx#5968 for workarounds.

kubectl apply -f ingress.yaml

deploy static-server

kubectl apply -f static-server.yaml

add intention to static server from ingress

kubectl apply -f allow-static-server.yaml

To get the ingress endpoint provisioned in ELB:

kubectl get service  -n ingress-nginx

Ensure you get back a hello world response:

STATIC_SERVER_LB=$(kubectl get service  -n ingress-nginx ingress-nginx-controller -o jsonpath="{.status.loadBalancer.ingress[*].hostname}")
curl $STATIC_SERVER_LB