aws-load-balancer-controller
aws-load-balancer-controller copied to clipboard
A Kubernetes controller for Elastic Load Balancers
We're running our AWS-LB-Controller (using NLB for FTP service with few passive ports and one active port). Now, we encounter an issue where Security Group inbound rules are deleted (SG...
We have a simple non-shared ALB per ingress system, and recently noticed when cleaning up an old cluster (with ALBC v2.3.0) that a number of minor AWS resources had leaked....
We are trying to add pods from two clusters to a single target group. In one cluster we create a service with `service.beta.kubernetes.io/aws-load-balancer-type: nlb-ip` to create an NLB, in the...
### Issue https://github.com/kubernetes-sigs/aws-load-balancer-controller/issues/1859 ### Description This change adds support for creating, deleting and updating VPC endpoint services along with their permissions. It supports the three suggested configuration options - allowed...
**Describe the bug** I ran into issues with TLS certs being regenerated due to these bugs: https://github.com/kubernetes-sigs/aws-load-balancer-controller/issues/2312 https://github.com/kubernetes-sigs/aws-load-balancer-controller/pull/2264 Once the TLS certs changed, the MutatingWebhook for PodReadinessGate started failing and...
my k8s ingress object definition had: ``` annotations: alb.ingress.kubernetes.io/certificate-arn: redact alb.ingress.kubernetes.io/group.name: infra-apps alb.ingress.kubernetes.io/healthcheck-path: /swaggerui/ alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS":443}]' alb.ingress.kubernetes.io/load-balancer-attributes: idle_timeout.timeout_seconds=4000 alb.ingress.kubernetes.io/scheme: internal alb.ingress.kubernetes.io/security-groups: redacty,redactz alb.ingress.kubernetes.io/ssl-policy: ELBSecurityPolicy-TLS-1-2-2017-01 alb.ingress.kubernetes.io/subnets: subnet-redact1,subnet-redact2,subnet-redact3 alb.ingress.kubernetes.io/tags: redact alb.ingress.kubernetes.io/target-type: instance...
**Is your feature request related to a problem?** For our frontends in our EKS we need certificates which are RSA_4096, which are currently not issued by AWS ACM. Therefore we...
**Is your feature request related to a problem?** Currently it is possible to reference CIDR's using the `alb.ingress.kubernetes.io/inbound-cidrs` annotation. This is great for allowing traffic from the public IP space....
It would be great to have metrics per alb group where we see how many targets are registered and if there is any rule failure... Right now an iam error...