UNCLASSIFIED - NO CUI

Skip to content

Use an Elastic IPs w/Secondary IP for Keycloak on a single EC2 instance

Danny Gershman requested to merge k3d-elastic-ips-and-secondary into master

General MR

Summary

This introduces a new option -a, for provisioning a Secondary public IP to make it much easier to use both a Public and Passthrough Istio Gateway on a single EC2 without having to spin up two instances / use a MetalLB. When this feature is used, an IPv4 Public Address will not be auto-assigned, but instead two Elastic IPs will be attached.

I submitted a request to AWS to get the limit of 20 EIPs bumped to 100 EIPs (which was approved). This should be more than sufficient given that there are usually not more than 5-10 dev instances up at a time, and likely many people will not use/need this all the time.

Any unattached Elastic IPs will be cleaned up on the next run. I thought about doing this doing this as a shutdown script, however that would require an IAM Instance Profile, which is possible but not sure we want to do that.

Relevant logs/screenshots

N/A

Edited by Danny Gershman

Merge request reports