kubernetes-sigs/aws-load-balancer-controller

Feature: log a warning if ARN of certificate is not in the same region where ALB is being created

开放

#2,754 创建于 2022年8月9日

 (8 条评论) (0 个反应) (1 位负责人)Go (1,644 个派生)auto 404
good first issuekind/featurelifecycle/stale

仓库指标

星标
 (4,317 个星标)
PR 合并指标
 (PR 指标待抓取)

描述

Is your feature request related to a problem? If you create a Kubernetes cluster in AWS, and an ALB is being created in a particular AWS region, the certificate must be stored in AWS Certificate Manager in the same region as the ALB, otherwise when creating an ingress, the ingress will fail.

A warning will look like:

  Warning  FailedDeployModel  50m   ingress  Failed deploy model due to ValidationError: Certificate ARN 'arn:aws:acm:us-east-1:XXXX:certificate/mycert' is not valid

See description of problem here: https://kubernetes.slack.com/archives/C8SH2GSL9/p1659997656606629

Describe the solution you'd like Print out a warning to the logs, indicating that the ARN of the certificate is for a region which is different than the region where the ALB and ingress is being created. This will give the end user better diagnostics as to the source of the problem.

Describe alternatives you've considered I set up an EKS cluster in us-east-2, and tried to use a certificate stored in us-east-1 and ingress creation failed. The ValidationError error message which came back was confusing and did not help me root cause the problem.

贡献者指南