Hi team, I am trying to enable ingress for frontend and backend by following https://datahubproject.io/docs/deploy/aws/#expose-endpoints-using-a-load-balancer I want to enable ingress only for use inside the company and do not want to expose the IP outside. Should I change the

<http://alb.ingress.kubernetes.io/scheme|alb.ingress.kubernetes.io/scheme>

to

internal

while deploying the chart? Also what do I do for the certificate-arn?

@lemon-terabyte-66903 - These are the configurations we used for our Application deployed on EKS. For Scheme, we used internal and certificate arn is the arn for the certificate either imported/created in ACM

ingress:
  enabled: true
  className: ""
  annotations:
    <http://kubernetes.io/ingress.class|kubernetes.io/ingress.class>: alb
    # <https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.2/guide/ingress/annotations/#scheme>
    <http://alb.ingress.kubernetes.io/scheme|alb.ingress.kubernetes.io/scheme>: internal
    # <https://docs.aws.amazon.com/eks/latest/userguide/alb-ingress.html>
    <http://alb.ingress.kubernetes.io/target-type|alb.ingress.kubernetes.io/target-type>: instance
    <http://alb.ingress.kubernetes.io/certificate-arn|alb.ingress.kubernetes.io/certificate-arn>: <certificate arn>
    <http://alb.ingress.kubernetes.io/inbound-cidrs|alb.ingress.kubernetes.io/inbound-cidrs>: 10.0.0.0/8
    <http://alb.ingress.kubernetes.io/listen-ports|alb.ingress.kubernetes.io/listen-ports>: '[{"HTTP": 80}, {"HTTPS":443}]'
    <http://alb.ingress.kubernetes.io/actions.ssl-redirect|alb.ingress.kubernetes.io/actions.ssl-redirect>: '{"Type": "redirect", "RedirectConfig": { "Protocol": "HTTPS", "Port": "443", "StatusCode": "HTTP_301"}}'
    # <https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.2/guide/ingress/annotations/#subnets>
    <http://alb.ingress.kubernetes.io/subnets|alb.ingress.kubernetes.io/subnets>: <subnets>
    <http://alb.ingress.kubernetes.io/backend-protocol|alb.ingress.kubernetes.io/backend-protocol>: HTTP
  hosts:
    - host: <hostname>
      redirectPaths:
        - path: /*
          name: ssl-redirect
          port: use-annotation
      paths:
        - /*
      hostedZoneId: <hostzoneid>
  tls: [ ]