How to debug alb.ingress.kubernetes.io/group.name reconciliation when using EKS automode

[pfrydids]

Hi,

I'd just like some guidance as to how to debug why to Ingress resources aren't sharing the same ALB once annotated with alb.ingress.kubernetes.io/group.name

My annotations on the two ingresses are as follows

    alb.ingress.kubernetes.io/actions.ssl-redirect: IDENTICAL
    alb.ingress.kubernetes.io/certificate-arn: DIFFERENT
    alb.ingress.kubernetes.io/group.name: restricted
    alb.ingress.kubernetes.io/inbound-cidrs: IDENTICAL
    alb.ingress.kubernetes.io/listen-ports: IDENTICAL
    alb.ingress.kubernetes.io/scheme: internet-facing
    alb.ingress.kubernetes.io/target-type: ip
    alb.ingress.kubernetes.io/wafv2-acl-arn: IDENTICAL

As you see the only annotation that differs is alb.ingress.kubernetes.io/certificate-arn which I thought would be merged.

The ingresses are in different namespaces .

I haven't managed to find anything useful in Cloudwatch .

The rules in each ingress look like

  rules:
  - host: domain1.com
    http:
      paths:
      - backend:
          service:
            name: api
            port:
              number: 8080
        path: /*
        pathType: ImplementationSpecific

[pfrydids]

Think it is answered by

https://repost.aws/questions/QUOOil0VrWTMCOwd_nrTRXGg/eks-automode-loadbalancer-functionality

and

https://docs.aws.amazon.com/eks/latest/userguide/auto-configure-alb.html#ingress-reference

basically alb.ingress.kubernetes.io/group.name is not supported on an ingress resource in EKS auto-mode it is only supported on the IngressClassParams resource.

Can highlight this in your docs?

https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.13/guide/ingress/ingress_class/#specgroup isn't entirely consistent

It seems to suggest that you need an IngressClass per group

[andreybutenko]

Hi from the ELB team!

EKS documentation should continue to be the authoritative source for Auto Mode functionality. Still, I understand your issue and I'm sorry for the trouble; the open-source Load Balancer Controller documentation should make it easier for Auto Mode users to reach the relevant EKS documentation.

I published a PR with a documentation update: #4196

Let me know if you have any feedback or thoughts. Thank you!