<p dir="auto"><strong>Is this a request for help?</strong> (If yes, you should use our troubleshooting guide and community support channels, see <a href="http://kubernetes.io/docs/troubleshooting/" rel="nofollow">http://kubernetes.io/docs/troubleshooting/</a>.): First attempted via #kubernetes-users on slack</p>
<p dir="auto"><strong>What keywords did you search in Kubernetes issues before filing this one?</strong> (If you have found any duplicates, you should instead reply there.):  internal aws load balancer</p>
<hr>
<p dir="auto"><strong>Is this a BUG REPORT or FEATURE REQUEST?</strong> (choose one):<br>
Feature</p>

<p dir="auto"><strong>Kubernetes version</strong> (use <code class="notranslate">kubectl version</code>):</p>
<div class="snippet-clipboard-content notranslate position-relative overflow-auto" data-snippet-clipboard-copy-content="Client Version: version.Info{Major:&quot;1&quot;, Minor:&quot;3&quot;, GitVersion:&quot;v1.3.5+b0deb2e&quot;, GitCommit:&quot;b0deb2eb8f4037421077f77cb163dbb4c0a2a9f5&quot;, GitTreeState:&quot;not a git tree&quot;, BuildDate:&quot;2016-08-21T12:21:36Z&quot;, GoVersion:&quot;go1.7&quot;, Compiler:&quot;gc&quot;, Platform:&quot;darwin/amd64&quot;}
Server Version: version.Info{Major:&quot;1&quot;, Minor:&quot;3&quot;, GitVersion:&quot;v1.3.5+coreos.0&quot;, GitCommit:&quot;d7a04b1c6044647f5919fadf3cecb9ee70c10fc5&quot;, GitTreeState:&quot;clean&quot;, BuildDate:&quot;2016-08-15T21:01:42Z&quot;, GoVersion:&quot;go1.6.2&quot;, Compiler:&quot;gc&quot;, Platform:&quot;linux/amd64&quot;}"><pre class="notranslate"><code class="notranslate">Client Version: version.Info{Major:"1", Minor:"3", GitVersion:"v1.3.5+b0deb2e", GitCommit:"b0deb2eb8f4037421077f77cb163dbb4c0a2a9f5", GitTreeState:"not a git tree", BuildDate:"2016-08-21T12:21:36Z", GoVersion:"go1.7", Compiler:"gc", Platform:"darwin/amd64"}
Server Version: version.Info{Major:"1", Minor:"3", GitVersion:"v1.3.5+coreos.0", GitCommit:"d7a04b1c6044647f5919fadf3cecb9ee70c10fc5", GitTreeState:"clean", BuildDate:"2016-08-15T21:01:42Z", GoVersion:"go1.6.2", Compiler:"gc", Platform:"linux/amd64"}
</code></pre></div>
<p dir="auto"><strong>Environment</strong>:</p>
<ul dir="auto">
<li><strong>Cloud provider or hardware configuration</strong>: AWS</li>
<li><strong>OS</strong> (e.g. from /etc/os-release): CoreOS</li>
<li><strong>Install Method</strong>: kube-aws</li>
</ul>
<p dir="auto"><strong>Our use case</strong>:<br>
We are extending our on premise infrastructure into the AWS Cloud.  It's meant to be <em>internal-only</em> and we're taking measures to guarantee that security.</p>
<p dir="auto"><strong>Feature Request</strong>:<br>
A method to guarantee that the environment <em>stays</em> internal and does not accidentally get exposed externally.</p>
<p dir="auto"><strong>Possible Methods I've explored</strong>:</p>
<ul dir="auto">
<li>AWS IAM Policy to restrict kubernetes from creating a public ELB</li>
<li>AWS Security Group limiting client source IPs</li>
</ul>
<p dir="auto">I was speaking with <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/justinsb/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/justinsb">@justinsb</a> on #kubernetes-users on slack and he suggested I submit a request for this here.</p>
<p dir="auto">I haven't found a way of pausing/decommissioning a node, have all its containers stopped and recreated elsewhere in the cluster.</p>
<p dir="auto">This would be great for node upgrades (hardware, OS, etc.).</p>
<p dir="auto">Obviously, the node would have to be <em>blacklisted</em> so that no new containers are scheduled to it.</p>
<p dir="auto">/cc <a class="user-mention notranslate" data-hovercard-type="user" data-hovercard-url="/users/jmreicha/hovercard" data-octo-click="hovercard-link-click" data-octo-dimensions="link_type:self" href="https://github.com/jmreicha">@jmreicha</a></p>