John Gardiner Myers

> I wouldn't suggest an arbitrary policy but to keep the current policy on the ALB until all ingresses in the ingress groups are aligned with each other and then...

For those encountering this error message, I would suggest looking in CloudTrail for the `DescribeSubnets` call that LBC is issuing.

@ktibi https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.5/deploy/subnet_discovery/

@ktibi that ingress definition clearly shows a `alb.ingress.kubernetes.io/scheme: internet-facing` annotation, so it is internet-facing.

I don't quite see how this is worth the metrics cardinality it uses. It seems likely the report could be generated simply by querying the Kubernetes API for resources of...

So perhaps api-validate that a `group` is specified if any of those fields are set?

Which fields other than `load-balancer-name` imply a group?

/remove-lifecycle stale

Perhaps this should be a field in IngressClassParams which specifies the ALB for the group should be retained despite the group having zero Ingresses? One would then manage the IngressClass...

For the Listener/TG, the question would be what the preferred behavior is to incoming connections. Should it ECONNREFUSED or return a 404? I suspect it should ECONNREFUSED, which means to...