<p>I am trying to follow the instruction of AWS to create an ALB for EKS (Elastic K8s Services in AWS).
The instruction is here: <a href="https://docs.aws.amazon.com/eks/latest/userguide/alb-ingress.html" rel="noreferrer">https://docs.aws.amazon.com/eks/latest/userguide/alb-ingress.html</a><br />
I have problems at step 7 (Install the controller manually). When I try to apply a yaml file in substep 7-b-c, I get an error:</p>
<pre><code>Error from server (InternalError): error when creating &quot;v2_0_0_full.yaml&quot;: Internal error occurred: failed calling webhook &quot;webhook.cert-manager.io&quot;: Post https://cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s: x509: certificate is valid for ip-192-168-121-78.eu-central-1.compute.internal, not cert-manager-webhook.cert-manager.svc
</code></pre>
<p>Has anyone experienced similar kind of problem and what are the best ways to troubleshoot and solve the problem?</p>

<p>It seems that <a href="https://cert-manager.io/docs/" rel="nofollow noreferrer">cert-manager</a> doesn't run on Fargate as expected - <a href="https://github.com/kubernetes-sigs/aws-load-balancer-controller/issues/1606" rel="nofollow noreferrer">#1606</a>.</p>
<p>First option as a workaround is to install the helm chart which doesn't have the cert-manager dependency. Helm will generate the self-signed cert, and secret resources.</p>
<p>Different option is to remove all cert-manager stuff from the YAML manifest and provide your own self-signed certificate if you  don't have helm as a dependency.</p>
<p>Take a look: <a href="https://www.gitmemory.com/issue/kubernetes-sigs/aws-load-balancer-controller/1563/726859452" rel="nofollow noreferrer">alb-cert-manager</a>, <a href="https://github.com/kubernetes-sigs/aws-load-balancer-controller/issues/1563" rel="nofollow noreferrer">alb-eks-cert-manager</a>.</p>
<p>Useful article: <a href="https://medium.com/@yspreen/get-started-with-fargate-on-aws-https-ingress-991a09020cc0" rel="nofollow noreferrer">aws-fargate</a>.</p>
