kubernetes-sigs/aws-load-balancer-controller

Feature: log a warning if ARN of certificate is not in the same region where ALB is being created

開放

#2,754 建立於 2022年8月9日

 (8 則留言) (0 個反應) (1 位負責人)Go (1,644 個分叉)auto 404
good first issuekind/featurelifecycle/stale

倉庫指標

星標
 (4,317 顆星)
PR 合併指標
 (平均合併 14天 12小時) (30 天內合併 16 個 PR)

描述

Is your feature request related to a problem? If you create a Kubernetes cluster in AWS, and an ALB is being created in a particular AWS region, the certificate must be stored in AWS Certificate Manager in the same region as the ALB, otherwise when creating an ingress, the ingress will fail.

A warning will look like:

  Warning  FailedDeployModel  50m   ingress  Failed deploy model due to ValidationError: Certificate ARN 'arn:aws:acm:us-east-1:XXXX:certificate/mycert' is not valid

See description of problem here: https://kubernetes.slack.com/archives/C8SH2GSL9/p1659997656606629

Describe the solution you'd like Print out a warning to the logs, indicating that the ARN of the certificate is for a region which is different than the region where the ALB and ingress is being created. This will give the end user better diagnostics as to the source of the problem.

Describe alternatives you've considered I set up an EKS cluster in us-east-2, and tried to use a certificate stored in us-east-1 and ingress creation failed. The ValidationError error message which came back was confusing and did not help me root cause the problem.

貢獻者指南