Skip to content

Commit fd8396f

Browse files
authored
Change user guide to note Lattice address range (#45)
* Change user guide to note Lattice address range * More fixes * Small changes * Other small changes * Fixed address range
1 parent f20531c commit fd8396f

File tree

1 file changed

+9
-12
lines changed

1 file changed

+9
-12
lines changed

docs/how-it-works.md

Lines changed: 9 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ Run through them again for a second cluster to use with the extended example sho
2626
```bash
2727
eksctl create cluster —name <my-cluster> —region us-west-2
2828
```
29-
1. TODO: I don't know how to do this step (link?): TODO: Also, Liwen said to say "Lattice-managed prefix" instead of 169.254.0.0/16. Configure security group: To receive traffic from the VPC Lattice fleet, all Pods MUST explicit configure a security group to allow traffic from the 169.254.0.0/16 address range.
29+
1. Configure security group: To receive traffic from the VPC Lattice fleet, all Pods MUST explicitly configure a security group to allow traffic from the 169.254.171.0/24 address range.
3030

3131
1. Create an IAM OIDC provider: See [Creating an IAM OIDC provider for your cluster](https://docs.aws.amazon.com/eks/latest/userguide/enable-iam-roles-for-service-accounts.html) for details.
3232
```bash
@@ -54,7 +54,7 @@ Run through them again for a second cluster to use with the extended example sho
5454
```
5555
```bash
5656
aws iam create-policy \
57-
--policy-name AWSMercuryControllerIAMPolicy \
57+
--policy-name VPCLatticeControllerIAMPolicy \
5858
--policy-document file://recommended-inline-policy.json
5959
```
6060
1. Create the `system` namespace:
@@ -68,7 +68,7 @@ Run through them again for a second cluster to use with the extended example sho
6868
--cluster=<my-cluster-name> \
6969
--namespace=system \
7070
--name=gateway-api-controller \
71-
--attach-policy-arn=<AWSMercuryControllerIAMPolicy ARN CREATED IN CREATE_POLICY STEP> \
71+
--attach-policy-arn=<VPCLatticeControllerIAMPolicy ARN CREATED IN create-policy STEP> \
7272
--override-existing-serviceaccounts \
7373
--region us-west-2 \
7474
--approve
@@ -116,7 +116,7 @@ This example creates a single cluster in a single VPC, then configures two route
116116
...
117117
status:
118118
conditions:
119-
message: 'aws-gateway-arn: arn:aws:vpc-service-network:us-west-2:694065802095:mesh/mesh-0d01b22a156d2cc2f'
119+
message: 'aws-gateway-arn: arn:aws:vpc-lattice:us-west-2:694065802095:servicenetwork/sn-0ab6bb70055929edd'
120120
reason: Reconciled
121121
status: "True"
122122
```
@@ -172,11 +172,11 @@ This example creates a single cluster in a single VPC, then configures two route
172172

173173
1. During preview, you are required to install the VPC Lattice CLI:
174174
```bash
175-
aws configure add-model --service-model file://scripts/aws_sdk_model_override/models/apis/mercury/2021-08-17/api-2.json service-name ec2-lattice
175+
aws configure add-model --service-model file://scripts/aws_sdk_model_override/models/apis/vpc-lattice/2022-11-30/api-2.json --service-name vpc-lattice
176176
```
177177
1. Use the VPC Lattice CLI to find the DNS name. You can use the `curl` command to get information about each service by adding the service name to the end of the HTTPRoute DNS name. Those names are gathered from AWS Route53 instead of Kubernetes CoreDNS.
178178
```bash
179-
aws ec2-lattice list-services \
179+
aws vpc-lattice list-services \
180180
--endpoint-url=https://vpc-service-network.us-west-2.amazonaws.com (https://vpc-service-network.us-west-2.amazonaws.com/)
181181
```
182182
```
@@ -225,12 +225,12 @@ This example creates a single cluster in a single VPC, then configures two route
225225
```
226226
Requesting to Pod(parking-6cdcd5b4b4-g8dkb): parking handler pod
227227
```
228-
1. From inside of the pod, use `curl` to connect to the review service:
228+
1. From inside of the pod, use `curl` to connect to the inventory service:
229229
```bash
230-
curl rates-00422586e3362607e.7d67968.vpc-service-network-svcs.us-west-2.amazonaws.com/review
230+
curl rates-00422586e3362607e.7d67968.vpc-service-network-svcs.us-west-2.amazonaws.com/inventory
231231
```
232232
```
233-
Requesting to Pod(review-5888566ff6-89fqk): review handler pod
233+
Requesting to Pod(inventory-5888566ff6-89fqk): inventory handler pod
234234
```
235235
1. Exit the pod:
236236
```bash
@@ -356,7 +356,6 @@ With VPC Lattice you can also avoid some of these common problems:
356356
As a Kubernetes user, you can have a very Kubernetes-native experience using the VPC Lattice APIs.
357357
The following figure illustrates how VPC Lattice object connect to [Kubernetes Gateway API](https://gateway-api.sigs.k8s.io/) objects:
358358

359-
TODO: Replace with new figure from end of this slide deck: https://amazon.awsapps.com/workdocs/index.html#/document/6398b63682b6fae1ac462edde9af07acc45014557df1dd92b32ccc2c6a744de5
360359
[Image: VPCLatticeToKubernetesGatewayAPI.png]
361360

362361
As shown in the figure, there are different personas associated with different levels of control in VPC Lattice.
@@ -370,5 +369,3 @@ Notice that the Kubernetes Gateway API syntax is used to create the gateway, HTT
370369

371370
## Further information
372371

373-
TODO: Add links to other docs, blogs, or software (will any be ready in time for re:Invent?)
374-

0 commit comments

Comments
 (0)