Add load balancer (AWS)

If you deploy MSR to AWS you may also want to add a load balancer to your installation.

1. Set an environment variable to use in assigning an internal service name to the load balancer service:

   export MSR_ELB_SERVICE="msr-public-elb"
   

2. Use Kubernetes to create an AWS load balancer to expose NGINX, the front end for the MSR web UI:

   kubectl expose deployment msr-nginx --type=LoadBalancer \
     --name="${MSR_ELB_SERVICE}"
   

3. Check the status:

   kubectl get svc | grep "${MSR_ELB_SERVICE}" | awk '{print $4}'
   

   Note

   The output returned on AWS will be a FQDN, whereas other cloud providers may return an FQDN or an IP address.

   Example output:

   af42a8a8351864683b584833065b62c7-1127599283.us-west-2.elb.amazonaws.com
   

   Note

   • If nothing returns after you have run the command, wait a few minutes and run the command again.

   • If the command returns an FQDN it may be necessary to wait for the new DNS record to resolve. You can check the resolution status by running the following script, inserting the output string you received in place of $FQDN:

     while : ; do dig +short $FQDN ; sleep 5 ; done
     

   • If the command returns an IP address, you can access the load balancer at: https://<load-balancer-IP>/

4. When one or more IP addresses display, you can interrupt the shell loop and access your MSR 3.0.x load balancer at: https://$FQDN/

   Note

   The load balancer will stop any attempt to tear down the VPC in which the EC2 instances are running. As such, in order to tear down the VPC you must first remove the load balancer:

   kubectl delete svc msr-public-elb
   

5. Optional. Configure MSR to use Notary to sign images. To do this, update NGINX to add the DNS name:

   1. When using an <MSR-chart-version> version, such as 1.0.0, for the Helm and MSR_FQDN, run:

      helm upgrade msr msrofficial/msr
        --version $<MSR-chart-version> \
        --set-file license=path/to/file/license.lic \
        --set nginx.webtls.spec.dnsNames="{nginx,localhost,${MSR_FQDN}}" \
        --reuse-values
      

   2. Verify the upgrade change:

      helm get values msr
      

      Example output:

      USER-SUPPLIED VALUES:
      license: |
      e3ded81fe8de30b857fe1de1d1f6968bcb8b5b1078021a88839ad3b3c9e1a77a94fa7987bd2591c8dd59ad8bae4ce0719a67d9756561b7c67c12ee42b1c505bf596e4224abb792a00bfbdf4c9fc32ea727f82f8f6250720bb634b082162842797e87ad3bfbf6f408dae41e81a862cd73a3d2729dc81365900e293b4724231b2c6f0fc6c2e83ee32d1eb0107ca9afa42a4f5b20ac5c6b538a551d8f380f6a89d9746fc7405d5ba96738c1365a6b91b2c0572225b8a5d39e4b6956c48bf9b07068248762c71987999dfc8c1e4432e39fd20f52b6d9ddf4839ea5c5e0164acb3956c01da4dd3f5499deed204dff40323445b87196a11e3ee966f238e32b414fe8e5b1881859e3fadc8394826882fb3e39f6c4d2369e5b9161b9495455c4587dbec33d197accf9f5c1032be5ed32a776f091e1935fd0fecdf7010caa8cf3034b15d46247146cc5917843e771
      nginx:
      webtls:
         spec:
            dnsNames:
            - nginx
            - localhost
            - af42a8a8351864683b584833065b62c7-1127599283.us-west-2.elb.amazonaws.com