yeah, the only way to get it to work is to allow the public ip's of the workers to be able to access the mongo cluster. i will put the cluster inside k8s and install the monitoring agent there.
On 19 August 2016 at 14:16, Rodrigo Campos <rodrig...@gmail.com> wrote: > > > On Friday, August 19, 2016, Norman Khine <nor...@khine.net> wrote: > >> Hello, >> I have a mongo cluster hosted on EC2 and i also have a k8s cluster with a >> simple node.js app that connects to mongo. >> And as outgoing connection will go from any node how do secure my mongo >> cluster to accept connections from these pods? >> >> My k8s cluster runs in a different AWS account to the mongo cluster. >> > > On the same account you can allow things like "any coming from this > security group" and thing like that. > > If you use different aws accounts, do you use the public IP and pay for > that traffic?? If you connect with private IPs, you might be able to do > something with it (not sure you can between two different aws accounts). > > Another option might be to use some fixed public IP on the workers, to > allow only those. Not sure how an elastic IP bodes with an auto scaling > group nor if there is a limit on elastic IPs. But, in any case, it doesn't > seem nice to pay for that traffic :-/ > > -- > You received this message because you are subscribed to a topic in the > Google Groups "Kubernetes user discussion and Q&A" group. > To unsubscribe from this topic, visit https://groups.google.com/d/ > topic/kubernetes-users/rz3ldJzfSJM/unsubscribe. > To unsubscribe from this group and all its topics, send an email to > kubernetes-users+unsubscr...@googlegroups.com. > To post to this group, send email to kubernetes-users@googlegroups.com. > Visit this group at https://groups.google.com/group/kubernetes-users. > For more options, visit https://groups.google.com/d/optout. > -- %>>> "".join( [ {'*':'@','^':'.'}.get(c,None) or chr(97+(ord(c)-83)%26) for c in ",adym,*)&uzq^zqf" ] ) -- You received this message because you are subscribed to the Google Groups "Kubernetes user discussion and Q&A" group. To unsubscribe from this group and stop receiving emails from it, send an email to kubernetes-users+unsubscr...@googlegroups.com. To post to this group, send email to kubernetes-users@googlegroups.com. Visit this group at https://groups.google.com/group/kubernetes-users. For more options, visit https://groups.google.com/d/optout.
