kubernetes-sigs/aws-load-balancer-controller

Support AWS Shield advanced on NLBs not part of ingress controller

Open

#3,752 opened on Jun 21, 2024

View on GitHubContributor guide
 (4 comments) (2 reactions) (0 assignees)Go (1,644 forks)auto 404
good first issuekind/feature

Repository metrics

Stars
 (4,317 stars)
PR merge metrics
 (PR metrics pending)

Description

Currently the ALB controller supports an annotation to enable AWS Shield Advanced for ALB / Ingress resource. alb.ingress.kubernetes.io/shield-advanced-protection

AWS Shield Advanced is also available for NLBs, it would be great if you could provide and annotation and support for enabling of shield-advanced-protection on NLBs created using the service resource. I guess it would also need to provision an elastic IP, linked to the NLB, for advanced shield to work.

Contributor guide

Research direction
Investigate how the existing ALB annotation for Shield Advanced is implemented in the controller, then understand NLB provisioning and Elastic IP requirements, and propose a design for adding a similar annotation for NLB services.
Tech stack
goaws
Domain
backendcloudinfrastructure
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Mostly clear
Prerequisites
GitGoKubernetesAWS
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
40