{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/31713","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/31713/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/31713/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/31713/events","html_url":"https://github.com/kubernetes/kubernetes/issues/31713","id":174069442,"number":31713,"title":"How to restrict Kubernetes Cluster to internal IPs/ELBs/... in AWS?","user":{"login":"dlamotte","id":30057,"avatar_url":"https://avatars.githubusercontent.com/u/30057?v=3","gravatar_id":"","url":"https://api.github.com/users/dlamotte","html_url":"https://github.com/dlamotte","followers_url":"https://api.github.com/users/dlamotte/followers","following_url":"https://api.github.com/users/dlamotte/following{/other_user}","gists_url":"https://api.github.com/users/dlamotte/gists{/gist_id}","starred_url":"https://api.github.com/users/dlamotte/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dlamotte/subscriptions","organizations_url":"https://api.github.com/users/dlamotte/orgs","repos_url":"https://api.github.com/users/dlamotte/repos","events_url":"https://api.github.com/users/dlamotte/events{/privacy}","received_events_url":"https://api.github.com/users/dlamotte/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/component/kubectl","name":"component/kubectl","color":"0052cc"},{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/team/cluster","name":"team/cluster","color":"d2b48c"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2016-08-30T16:48:13Z","updated_at":"2016-10-06T17:03:45Z","closed_at":null,"body":"<!-- Thanks for filing an issue! Before hitting the button, please answer these questions.-->\r\n\r\n**Is this a request for help?** (If yes, you should use our troubleshooting guide and community support channels, see http://kubernetes.io/docs/troubleshooting/.): First attempted via #kubernetes-users on slack\r\n\r\n\r\n**What keywords did you search in Kubernetes issues before filing this one?** (If you have found any duplicates, you should instead reply there.):  internal aws load balancer\r\n\r\n---\r\n\r\n**Is this a BUG REPORT or FEATURE REQUEST?** (choose one):\r\nFeature\r\n\r\n<!--\r\nIf this is a BUG REPORT, please:\r\n  - Fill in as much of the template below as you can.  If you leave out\r\n    information, we can't help you as well.\r\n\r\nIf this is a FEATURE REQUEST, please:\r\n  - Describe *in detail* the feature/behavior/change you'd like to see.\r\n\r\nIn both cases, be ready for followup questions, and please respond in a timely\r\nmanner.  If we can't reproduce a bug or think a feature already exists, we\r\nmight close your issue.  If we're wrong, PLEASE feel free to reopen it and\r\nexplain why.\r\n-->\r\n\r\n**Kubernetes version** (use `kubectl version`):\r\n```\r\nClient Version: version.Info{Major:\"1\", Minor:\"3\", GitVersion:\"v1.3.5+b0deb2e\", GitCommit:\"b0deb2eb8f4037421077f77cb163dbb4c0a2a9f5\", GitTreeState:\"not a git tree\", BuildDate:\"2016-08-21T12:21:36Z\", GoVersion:\"go1.7\", Compiler:\"gc\", Platform:\"darwin/amd64\"}\r\nServer Version: version.Info{Major:\"1\", Minor:\"3\", GitVersion:\"v1.3.5+coreos.0\", GitCommit:\"d7a04b1c6044647f5919fadf3cecb9ee70c10fc5\", GitTreeState:\"clean\", BuildDate:\"2016-08-15T21:01:42Z\", GoVersion:\"go1.6.2\", Compiler:\"gc\", Platform:\"linux/amd64\"}\r\n```\r\n\r\n**Environment**:\r\n- **Cloud provider or hardware configuration**: AWS\r\n- **OS** (e.g. from /etc/os-release): CoreOS\r\n- **Install Method**: kube-aws\r\n\r\n**Our use case**:\r\nWe are extending our on premise infrastructure into the AWS Cloud.  It's meant to be _internal-only_ and we're taking measures to guarantee that security.\r\n\r\n**Feature Request**:\r\nA method to guarantee that the environment _stays_ internal and does not accidentally get exposed externally.\r\n\r\n**Possible Methods I've explored**:\r\n* AWS IAM Policy to restrict kubernetes from creating a public ELB\r\n* AWS Security Group limiting client source IPs\r\n\r\nI was speaking with @justinsb on #kubernetes-users on slack and he suggested I submit a request for this here."},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/252025816","html_url":"https://github.com/kubernetes/kubernetes/issues/31713#issuecomment-252025816","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/31713","id":252025816,"user":{"login":"whitlockjc","id":98899,"avatar_url":"https://avatars.githubusercontent.com/u/98899?v=3","gravatar_id":"","url":"https://api.github.com/users/whitlockjc","html_url":"https://github.com/whitlockjc","followers_url":"https://api.github.com/users/whitlockjc/followers","following_url":"https://api.github.com/users/whitlockjc/following{/other_user}","gists_url":"https://api.github.com/users/whitlockjc/gists{/gist_id}","starred_url":"https://api.github.com/users/whitlockjc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whitlockjc/subscriptions","organizations_url":"https://api.github.com/users/whitlockjc/orgs","repos_url":"https://api.github.com/users/whitlockjc/repos","events_url":"https://api.github.com/users/whitlockjc/events{/privacy}","received_events_url":"https://api.github.com/users/whitlockjc/received_events","type":"User","site_admin":false},"created_at":"2016-10-06T17:03:45Z","updated_at":"2016-10-06T17:03:45Z","body":"Feel free to ping me on Slack.  If you do, I'll keep you in the loop and cc you in the eventual PR."}}
{"actor":{"display_login":"whitlockjc"}}