How to add external LB

[sashalarsoo]

Hi, im passing from ingress nginx to envoy gateway. Im using OCI external LB annotations on Gateway, is it the right way to proceed to provision lb ?

[arkodg]

yeah that approach works, if you are looking for more customizations, there's also https://gateway.envoyproxy.io/docs/tasks/operations/customize-envoyproxy/

[sashalarsoo]

It looks like it breaks actually....
I use these annotations which are the same than actual working ingress:

oci.oraclecloud.com/initial-defined-tags-override: >-
      lorem opsum
    oci.oraclecloud.com/initial-freeform-tags-override: '{"Name": "default"}'
    service.beta.kubernetes.io/oci-load-balancer-connection-proxy-protocol-version: '2'
    service.beta.kubernetes.io/oci-load-balancer-internal: 'true'
    service.beta.kubernetes.io/oci-load-balancer-security-list-management-mode: None
    service.beta.kubernetes.io/oci-load-balancer-shape: flexible
    service.beta.kubernetes.io/oci-load-balancer-shape-flex-max: '50'
    service.beta.kubernetes.io/oci-load-balancer-shape-flex-min: '10'
    service.beta.kubernetes.io/oci-load-balancer-subnet1: >-
     private subnet

The error i have got:

Warning  SyncLoadBalancerFailed  6s  service-controller  Error syncing load balancer: failed to ensure load balancer: creating load balancer: Error returned by Loa │
│ dBalancer Service. Http Status Code: 400. Error Code: InvalidParameter. Opc request id: 3d9267ddc26e1092280e60ff41fa37e1/FE4F674871EECB57A5491F69414D5349/0D8EFD6508D │
│ D34DCD4CB21BA3ED831D0. Message: Private subnet with id ocid1.subnet.oc1.eu-amsterdam-1.aaaaaaaaqwji722xv3mo5stbs......s not allowed in │
│  a public loadbalancer.. 

However its annotations that already works on ingress nginx and when using those annotations on a random pod it working and provisioning private lb but when using them on gateway its switching to public lb and so not working...