Skip to content

Conversation

@komer3
Copy link
Contributor

@komer3 komer3 commented Dec 8, 2025

Add support for configuring NodeBalancer frontend VPC placement via service annotations. This enables NodeBalancers to be deployed with private frontend addresses within a VPC.

New annotations:

  • linode-loadbalancer-frontend-ipv4-range: Explicit IPv4 CIDR
  • linode-loadbalancer-frontend-ipv6-range: Explicit IPv6 CIDR
  • linode-loadbalancer-frontend-vpc-name: VPC name for resolution
  • linode-loadbalancer-frontend-subnet-name: Subnet name for resolution
  • linode-loadbalancer-frontend-subnet-id: Direct subnet ID

Resolution precedence:

  1. IPv4/IPv6 Range annotations (explicit CIDR)
  2. VPC/Subnet name annotations (name-based resolution)
  3. Subnet ID annotation (direct ID)

Key behavioral difference from backend VPC implementation:

  • Frontend VPC is opt-in: returns nil when no annotations are present, resulting in no frontend VPC configuration
  • Backend VPC is always configured: falls through precedence levels and always returns VPC options using the service's default subnet ID

This design allows frontend VPC to remain an optional feature while backend VPC continues to be mandatory for NodeBalancer operation.

Includes:

  • CIDR validation for IPv4 and IPv6 ranges
  • Name-to-ID resolution requiring both vpc-name and subnet-name
  • Unit tests for validation, status generation, and option building
  • Debug logging for frontend VPC NodeBalancers

General:

  • Have you removed all sensitive information, including but not limited to access keys and passwords?
  • Have you checked to ensure there aren't other open or closed Pull Requests for the same bug/feature/question?

Pull Request Guidelines:

  1. Does your submission pass tests?
  2. Have you added tests?
  3. Are you addressing a single feature in this PR?
  4. Are your commits atomic, addressing one change per commit?
  5. Are you following the conventions of the language?
  6. Have you saved your large formatting changes for a different PR, so we can focus on your work?
  7. Have you explained your rationale for why this feature is needed?
  8. Have you linked your PR to an open issue

Add support for configuring NodeBalancer frontend VPC placement via
service annotations. This enables NodeBalancers to be deployed with
private frontend addresses within a VPC.

New annotations:
- linode-loadbalancer-frontend-ipv4-range: Explicit IPv4 CIDR
- linode-loadbalancer-frontend-ipv6-range: Explicit IPv6 CIDR
- linode-loadbalancer-frontend-vpc-name: VPC name for resolution
- linode-loadbalancer-frontend-subnet-name: Subnet name for resolution
- linode-loadbalancer-frontend-subnet-id: Direct subnet ID

Resolution precedence:
1. IPv4/IPv6 Range annotations (explicit CIDR)
2. VPC/Subnet name annotations (name-based resolution)
3. Subnet ID annotation (direct ID)

Key behavioral difference from backend VPC implementation:
- Frontend VPC is opt-in: returns nil when no annotations are present,
  resulting in no frontend VPC configuration
- Backend VPC is always configured: falls through precedence levels and
  always returns VPC options using the service's default subnet ID

This design allows frontend VPC to remain an optional feature while
backend VPC continues to be mandatory for NodeBalancer operation.

Includes:
- CIDR validation for IPv4 and IPv6 ranges
- Name-to-ID resolution requiring both vpc-name and subnet-name
- Unit tests for validation, status generation, and option building
- Debug logging for frontend VPC NodeBalancers
@github-actions github-actions bot added the new-feature for new features in the changelog. label Dec 8, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

new-feature for new features in the changelog.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants