kubernetes-sigs/aws-load-balancer-controller

Feature: log a warning if ARN of certificate is not in the same region where ALB is being created

Aperta

#2754 aperta il 9 ago 2022

 (8 commenti) (0 reazioni) (1 assegnatario)Go (1644 fork)auto 404
good first issuekind/featurelifecycle/stale

Metriche repository

Star
 (4317 stelle)
Metriche merge PR
 (Metriche PR in attesa)

Descrizione

Is your feature request related to a problem? If you create a Kubernetes cluster in AWS, and an ALB is being created in a particular AWS region, the certificate must be stored in AWS Certificate Manager in the same region as the ALB, otherwise when creating an ingress, the ingress will fail.

A warning will look like:

  Warning  FailedDeployModel  50m   ingress  Failed deploy model due to ValidationError: Certificate ARN 'arn:aws:acm:us-east-1:XXXX:certificate/mycert' is not valid

See description of problem here: https://kubernetes.slack.com/archives/C8SH2GSL9/p1659997656606629

Describe the solution you'd like Print out a warning to the logs, indicating that the ARN of the certificate is for a region which is different than the region where the ALB and ingress is being created. This will give the end user better diagnostics as to the source of the problem.

Describe alternatives you've considered I set up an EKS cluster in us-east-2, and tried to use a certificate stored in us-east-1 and ingress creation failed. The ValidationError error message which came back was confusing and did not help me root cause the problem.

Guida contributor