How to create certificate and route53 record for ALB created with K8s Ingress

Question

I have a hard time figuring out how to connect terraform resources with K8s resources. Here is my scenario:

To create an ALB and connect it to a service I need to create a certificate using AWS Certificate Manager beforehand and use its ARN in Ingress object in K8S files. After that, to create a Route53 record for ALB, I need to import the ALB DNS to terraform manifest. So there is some bake and forth between Terraform and K8S files.

I used to use AWS ECS and CDK. In that world, I would create an ECS service, Certificate, ALB, and Route53 record in CDK and I would not need to export and import different values. I'm looking for something similar to this for EKS and Terraform.

Accepted Answer

So it turned out that the [`AWS Load Balancer Controller`](https://kubernetes-sigs.github.io/aws-load-balancer-controller/v2.6/guide/ingress/cert_discovery/) can search for an existing certificate and use it. The controller will attempt to discover TLS certificates from the `tls` field in Ingress and `host` field in Ingress rules.

And for automatically create route53 record, we can use [`external-dns`](https://github.com/kubernetes-sigs/external-dns/blob/master/docs/tutorials/aws-load-balancer-controller.md) to do the job.

How to create certificate and route53 record for ALB created with K8s Ingress

Relevant content