constellation/internal/cloud/aws
Malte Poll 66f1333c31
terraform: use single zone loadbalancer frontend on AWS (#1983)
This change is required to ensure we have not tls handshake errors when connecting to the kubernetes api.
Currently, the certificates used by kube-apiserver pods contain a SAN field with the (single) public ip of the loadbalancer.
If we would allow multiple loadbalancer frontend ips, we could encounter cases where the certificate is only valid for one public ip,
while we try to connect to a different ip.
To prevent this, we consciously disable support for the multi-zone loadbalancer frontend on AWS for now.
This will be re-enabled in the future.
2023-06-30 16:56:31 +02:00
..
aws_test.go Correctly deploy the AWS CCM (#1853) 2023-06-13 09:58:39 +02:00
aws.go terraform: use single zone loadbalancer frontend on AWS (#1983) 2023-06-30 16:56:31 +02:00
BUILD.bazel bazel: add build files for go (#1186) 2023-03-09 15:23:42 +01:00
logger_test.go Correctly deploy the AWS CCM (#1853) 2023-06-13 09:58:39 +02:00
logger.go Correctly deploy the AWS CCM (#1853) 2023-06-13 09:58:39 +02:00