Deploying Graph Explorer in K8S (AWS EKS)

[felipe-loka]

Hi, I'm trying to deploy Graph Explorer in Kubernetes (private EKS cluster). I've used the public ECR image of Graph Explorer and the deployment was a success. The Graph Explorer tool is only accessible within the VPC (only people with VPN access can use it).

In this scenario I'm confused if I should or should not use the Proxy. My understanding is that I shouldn't use a Proxy, since the EKS cluster is using private EC2 nodes and the Graph Explorer is also deployed in same private subnets, but I was not able to connect.

[BeyondEvil]

From my understanding (blood, sweat, tears from trial and error), you need the proxy if you're using IAM auth regardless of how and where you deploy the graph. The proxy is responsible to signing the requests with the V4 sig.