Feature: log a warning if ARN of certificate is not in the same region where ALB is being created
#2,754 opened on Aug 9, 2022
Repository metrics
- Stars
- (4,317 stars)
- PR merge metrics
- (PR metrics pending)
Description
Is your feature request related to a problem? If you create a Kubernetes cluster in AWS, and an ALB is being created in a particular AWS region, the certificate must be stored in AWS Certificate Manager in the same region as the ALB, otherwise when creating an ingress, the ingress will fail.
A warning will look like:
Warning FailedDeployModel 50m ingress Failed deploy model due to ValidationError: Certificate ARN 'arn:aws:acm:us-east-1:XXXX:certificate/mycert' is not valid
See description of problem here: https://kubernetes.slack.com/archives/C8SH2GSL9/p1659997656606629
Describe the solution you'd like Print out a warning to the logs, indicating that the ARN of the certificate is for a region which is different than the region where the ALB and ingress is being created. This will give the end user better diagnostics as to the source of the problem.
Describe alternatives you've considered
I set up an EKS cluster in us-east-2, and tried to use a certificate stored in us-east-1 and ingress creation failed.
The ValidationError error message which came back was confusing and did not help me root cause the problem.