Installing a Application Load Balancer Ingress controller for Managed Service for Kubernetes

The Application Load Balancer Ingress controller for Yandex Managed Service for Kubernetes is provided via Helm, a Kubernetes package manager.

Before you begin

1. If you don't have the Yandex Cloud command line interface yet, install and initialize it.

2. Install the Helm package manager, version 3.7.0 or higher.

3. Create a service account to enable Ingress controller operation.

4. Using the CLI, generate an authorized service account key and save it to sa-key.json:

   yc iam key create \
     --service-account-name <service account name> \
     --output sa-key.json
   

5. Create a Managed Service for Kubernetes cluster with the following settings:

   • Kubernetes version: 1.19 or higher.
   • Public address: Auto.

6. Create a node group in any suitable configuration with Kubernetes version 1.19 or higher.

7. Create a namespace in your cluster.

Installation

1. Enable experimental OCI support (Open Container Initiative) for Helm:

   export HELM_EXPERIMENTAL_OCI=1
   

2. Authenticate the Helm client to the Yandex Container Registry registry using the authorized service account key:

   cat sa-key.json | helm registry login cr.yandex --username 'json_key' --password-stdin
   

3. Download the Ingress controller chart from the registry and unpack:

   helm pull \
     --version v0.1.0 \
     oci://cr.yandex/yc/yc-alb-ingress-controller-chart
   

4. Install the chart in the cluster:

   helm install \
     --namespace <namespace name> \
     --set folderId=<folder ID> \
     --set clusterId=<cluster ID> \
     --set-file saKeySecretKey=sa-key.json \
     yc-alb-ingress-controller ./yc-alb-ingress-controller-chart-v0.1.0.tgz
   

   • --namespace: name of namespace created prior to installation.

   • --set and --set-file set values for the chart either directly or from a file:

     • folderId: ID of Yandex Cloud folder where a Managed Service for Kubernetes cluster is created. You can retrieve the ID by following instructions in the Yandex Resource Manager documentation.
     • clusterId: Cluster ID. You can retrieve the ID by following instructions.
     • saKeySecretKey: Authorized service account key created prior to the installation.

   • The first argument (yc-alb-ingress-controller) is the name of the chart to install.

   • The second argument (./yc-alb-ingress-controller-chart-v0.1.0.tgz) is the path to the downloaded chart (./ points to the current directory).