Services not getting created after deploying the aws loadbalancer controller
- Dominant language
- Mustache
- Stars
- 1.3k
- Forks
- 1.1k
- Avg merge
- 22m
- Merged PRs (30d)
- 5
Description
Error: UPGRADE FAILED: failed to create resource: Internal error occurred: failed calling webhook "mservice.elbv2.k8s.aws": failed to call webhook: Post "[https://aws-load-balancer-webhook-service.kube-system.svc:443/mutate-v1-service?timeout=10s"](https://aws-load-balancer-webhook-service.kube-system.svc/mutate-v1-service?timeout=10s%22): Address is not allowed
We have deployed the aws load balancer chart with the version of 1.13.0 and white deploying ingress-nginx helm chart we are getting the above error while the service is getting created.
we see the mutatingwebhook configuration has this "mservice.elbv2.k8s.aws"
in the service we are using the below annotations:
service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled: 'true'
service.beta.kubernetes.io/aws-load-balancer-type: nlb
service.beta.kubernetes.io/aws-load-balancer-security-groups: sg-0XXXXXXXXXa
service.beta.kubernetes.io/aws-load-balancer-manage-backend-security-group-rules: 'true'
service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facin
Contributor guide
Research direction
Start with the AWS Load Balancer chart version 1.13.0, the mservice.elbv2.k8s.aws mutating webhook configuration, and the aws-load-balancer-webhook-service in kube-system. Reproduce the ingress-nginx Helm deployment while reviewing the listed Service annotations and the webhook connection error. Done means the Service is created successfully without the webhook reporting “Address is not allowed”.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- aws, helm, kubernetes
- Domain
- cloud, devops, infrastructure
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100