Kishor Joshi
Kishor Joshi
@zeevMetz, the aws lb controller requires the IAM permission to manage security group rules for traffic. If you remove the iam permission, controller will continue to log error messages, restarting...
The controller automatically adds the necessary rules for traffic access and health check. You could force a reconcile by either modifying the service or restarting the controller - see if...
do you happen to run multiple instances of the controller in the same cluster, or share the security group across multiple clusters in the same vpc?
@zeevMetz, would you be able to email the controller logs to k8s-alb-controller-triage AT amazon.com? Also check in your cloud trail for the RevokeSecurityGroupIngress call to check the user-agent of the...
@paul-civitas, this is not a controller limitation. You will have to restart the deployment manually if you make changes to the service account annotation.
/kind documentation
The controller currently doesn't support sharing the same TargetGroupBinding across multiple clusters. This is expected behavior since controller assumes exclusive ownership over the target group binding. There is a feature...
@saha-rajdeep, I'm closing this issue in favor of the feature request 2173. If you have further concerns on this matter, feel free to reach out to us.
@rodrigc, we can parse the certificates specified via annotation, and if the certificate is from a different region than the controller, return appropriate error while building the model. This way...