-
Notifications
You must be signed in to change notification settings - Fork 10
guides: Creating a PrivateLink to TriggerMesh Services #297
Conversation
1181590
to
4747f01
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Minor comments, amazing quality post!
docs/guides/knative-privatelink.md
Outdated
[PrivateLink](https://aws.amazon.com/privatelink) is a service that enables you to establish private connectivity | ||
between VPCs and services hosted on Amazon Web Services (AWS) or on-premises, | ||
without exposing data to the internet. Let’s look at the configuration required | ||
to access Knative services deployed on an AWS Elastic Kubernetes Service (AWS) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
same comment about Knative => TriggerMesh
docs/guides/knative-privatelink.md
Outdated
@@ -0,0 +1,136 @@ | |||
# Creating a PrivateLink to Knative Services |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is there a way we can spin this more around exposing TriggerMesh services than Knative? if it makes sense.
docs/guides/knative-privatelink.md
Outdated
|
||
## Configuring the Istio Ingress Gateway | ||
|
||
In the default configuration, the Istio networking layer for Knative creates an |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe worth mention something like
"the Istio networking layer (or other such as Contour or Kourrier)"
|
||
Before we set up the PrivateLink, let’s make sure that the VPC to which our EKS | ||
cluster is attached has the DNS hostnames feature enabled. This is needed in order | ||
to be able to access our Knative services using the URL configured for the services. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
knative still mentioned here, maybe not problem
## Configuring the Istio Ingress Gateway | ||
|
||
The Istio networking layer (or others such as Kourier) creates an Elastic Load | ||
Balancer (ELB) allowing public access to the Knative services running in the cluster. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
knative still mentioned here, maybe not problem
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
|
||
To access the TriggerMesh services via the PrivateLink, we can create an EC2 instance, | ||
in the consumers AWS account, on the same VPC in which the endpoint was created | ||
and use cURL to reach the Knative service endpoints. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
knative still mentioned here, maybe not problem
f20b9d4
to
1f5b46f
Compare
Closes #296