Hi guys, I have managed to create a setup of Traefik with Lets Encrypt and Cert manager.
However its difficult to get a setup working with AWS Certificate Manager.
Want to terminate the TLS at NLB level. Cant get the setup working as it always gives an error of ERR_CERT_COMMON_NAME_INVALID.
Although the cert and domain resolution is correct.
Here is the setup:
#values.yaml
service:
enabled: true
type: LoadBalancer
annotations:
service.beta.kubernetes.io/aws-load-balancer-type: "nlb"
service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facing"
service.beta.kubernetes.io/aws-load-balancer-name: "eks-nlb-traefik"
service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "443"
service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled: "true"
service.beta.kubernetes.io/aws-load-balancer-backend-protocol: "tls"
service.beta.kubernetes.io/aws-load-balancer-ssl-cert: ""
service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy: ELBSecurityPolicy-TLS13-1-2-2021-06
globalArguments:
- "--api.insecure=false"
Can anyone please help me here?
Or is it like traefik does not support NLB with Amazon ACM