Although there are 3rd party charts that spin up multiple lbs by default ( Looking at you wazuh 😡 )

So, Traefik actually lets you create routes based on Ingresses and because of the fact that

ingressRoutes

is a Traefik CRD and we’re using Helm… it’d be a nightmare if we had to do it that way. We lucked out and didn’t fully understand what we were doing initially but it worked out. Now is just a matter of getting the AWS ALB Controller to work the way we need. On a side note, did find that you can limit Traefik to find routes via specific IngressClasses which is super beneficial in our use case. Less routing noise for each Traefik controller and easier troubleshooting. Assuming Sandbox works tonight, I’ll post a diagram here tomorrow for those curious. Gotta do one anyway for my team’s sake before I push this out

In case anyone was curious, here’s a rough diagram on how it’s working now vs before. Main reason for the change was WAF enablement. Had to change to ALBs but the ALB Controller doesn’t allow for ALBs on Loadbalancer Services. Also, since Traefik does pickup routes from IngressClasses, we don’t have to make any changes on the Ingress side of our apps. We opted early on to let the ingress routes live within the app’s helm chart.