<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">Hi Yoshihiko,</div><div class=""><br class=""></div><div class="">If you have physical LB in your environment, you might want to make use of NodePort for distributing the access to multiple controller nodes. In that case, it is recommended to set Values.network.external_policy_local to true so that you could eliminate unnecessary hops.</div><div class="">Ingress backed by nginx could be used of course, but as you pointed, IP address of the node where ingress pod resides will be the address you’re accessing, which might not be desirable in many use cases.</div><div class="">If you plan to try it on GCP/GKE, where the ingress controller is backed by GCP’s load-balancer service, NodePort + ingress seems valid option for exposing your service to external.</div><div class="">FYI, <a href="https://cloud.google.com/kubernetes-engine/docs/tutorials/http-balancer" class="">https://cloud.google.com/kubernetes-engine/docs/tutorials/http-balancer</a></div><div class=""><br class=""></div><div class="">Hope this helps.</div><div class=""><br class=""></div><div class="">Hyunsun</div><div class=""><br class=""></div><br class=""><div><blockquote type="cite" class=""><div class="">On 5 Mar 2018, at 2:34 PM, 渥美 慶彦 <<a href="mailto:atsumi.yoshihiko@po.ntt-tx.co.jp" class="">atsumi.yoshihiko@po.ntt-tx.co.jp</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hi all,<br class=""># Resend with openstack-helm tag<br class=""><br class="">I try to deploy multinode OpenStack by openstack-helm<br class="">and want to access OpenStack API endpoints from out of k8s nodes.<br class="">To avoid service failure by node down, I think I need one virtual IP for the endpoints.(like Pacemaker)<br class="">Could you show me how to realize that if you have any information?<br class=""><br class="">A. Deploy OpenStack services for NodePort, and distribute the access to nodes using physical Load Balancer.<br class="">B. Using Ingress?<br class=""> I think Ingress is for L7 routing, so it can't be used to create VIP for the endpoints.<br class="">C. Any other ideas?<br class=""><br class="">And when I try this on GCP/GKE, is there any difference from on-premises?<br class=""><br class="">best regards<br class=""><br class="">-- <br class="">--------------------------------------------------------<br class="">Yoshihiko Atsumi<br class="">E-mail：atsumi.yoshihiko@<a href="http://po.ntt-tx.co.jp" class="">po.ntt-tx.co.jp</a><br class="">--------------------------------------------------------<br class=""><br class=""><br class=""><br class="">__________________________________________________________________________<br class="">OpenStack Development Mailing List (not for usage questions)<br class="">Unsubscribe: <a href="mailto:OpenStack-dev-request@lists.openstack.org" class="">OpenStack-dev-request@lists.openstack.org</a>?subject:unsubscribe<br class=""><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" class="">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br class=""></div></div></blockquote></div><br class=""></body></html>