Helm chart - missing annotation for nginx LB service

[vaclavhluzek]

There is no option in Helm to add annotations for the Load Balancer that is being created with a new listener. We have to manually annotate it for Azure to use an Internal LB.

Example:

kubectl annotate svc nginx-gateway-nginx -n nginx-gateway service.beta.kubernetes.io/azure-load-balancer-internal="true" --overwrite

kubectl annotate svc nginx-gateway-nginx -n nginx-gateway service.beta.kubernetes.io/azure-load-balancer-internal-subnet="snet-cze-prd-we-laz-akssvc-001" --overwrite

Proof me wrong or craete issue.
Thanks

[ciarams87]

Hi @vaclavhluzek

To add annotations to the Service fronting the NGINX deployment, there are two options:

1. Use the Gateway infrastructure field in the Gateway definition:

apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: gateway
spec:
  gatewayClassName: nginx
  listeners:
  - name: http
    port: 80
    protocol: HTTP
    hostname: "*.example.com"
  infrastructure:
    annotations:
      service.beta.kubernetes.io/azure-load-balancer-internal-subnet: snet-cze-prd-we-laz-akssvc-001

Please note this will add the annotation to all the resources provisioned as part of that Gateway deployment (Service, Deployment/DaemonSet, etc.). This is the simpler approach if you want the annotation applied broadly.

2. Use the NginxProxy resource and add a Patch to add the annotation. This gives you more granular control to target just the Service:

apiVersion: gateway.nginx.org/v1alpha2
kind: NginxProxy
metadata:
  name: ngf-proxy-multi-patch
spec:
  kubernetes:
    service:
      patches:
        - type: StrategicMerge
          value:
            metadata:
              annotations:
                service.beta.kubernetes.io/azure-load-balancer-internal-subnet: snet-cze-prd-we-laz-akssvc-001

Let me know if you have any questions!

[ciarams87]

Please note this can be done directly in the Helm chart using the gateways field to provision the gateway upon Helm installation, or using the nginx.service.patches field if you want this annotation to apply globally.