<p>I have a Kubernetes cluster that is connected over VPN to an on-premise datacentre. This cluster needs to "expose" Services to other programs running in the datacenter, but not to the Internet.</p>

<p>Currently I've been creating Services with type "NodePort" and then manually creating an Internal (Private) Load balancer to map an endpoint to the Cluster Node/Port combination.</p>

<p>However, this approach has some drawbacks:</p>

<ul>
<li>Having to manually add/remove Nodes from the load balancer (or have some sort of process which "scans" the list of all nodes and makes sure they're attached to the ELB)</li>
<li>Having to make sure to delete the ELB when deleting a Service (the "orphan ELB" problem)</li>
</ul>

<p>Does anyone know of any way to configure Kubernetes to bring up "Internal" load balancers in AWS instead of Externally facing ones and manage them in the same way that it does the External ones?</p>

<p>latest format is </p>

<pre><code>annotations:
      service.beta.kubernetes.io/aws-load-balancer-internal: true
</code></pre>
