title: AWS ALB Ingress Controller doesn't resolve over TLS
body: <p>I've installed and configured AWS ALB Ingress Controller(<a href="https://github.com/kubernetes-sigs/aws-alb-ingress-controller" rel="noreferrer">https://github.com/kubernetes-sigs/aws-alb-ingress-controller</a>) and it's working properly over HTTP. However, it doesn't resolve over HTTPS.</p>
  
  <p>The Ingress resource is the following:</p>
  
  <pre><code>$ kubectl describe ingress api-gateway-ingress
  Name:             api-gateway-ingress
  Namespace:        orbix-mvp
  Address:          4ae1e4ba-orbixmvp-apigatew-c613-1873743362.eu-central-1.elb.amazonaws.com
  Default backend:  default-http-backend:80 (&lt;none&gt;)
  TLS:
    api-gateway.orbixpay.com terminates api-gateway.orbixpay.com,4ae1e4ba-orbixmvp-apigatew-c613-1873743362.eu-central-1.elb.amazonaws.com
  Rules:
    Host  Path  Backends
    ----  ----  --------
    *     
          /*   api-gateway:3000 (&lt;none&gt;)
  Annotations:
    kubernetes.io/ingress.class:                       alb
    alb.ingress.kubernetes.io/scheme:                  internet-facing
    alb.ingress.kubernetes.io/ssl-policy:              ELBSecurityPolicy-2016-08
    alb.ingress.kubernetes.io/subnets:                 subnet-0c4cb5452b630939e, subnet-0e5d3c389bfbefee9
    alb.ingress.kubernetes.io/success-codes:           302
    kubectl.kubernetes.io/last-applied-configuration:  {"apiVersion":"extensions/v1beta1","kind":"Ingress","metadata":{"annotations":{"alb.ingress.kubernetes.io/scheme":"internet-facing","alb.ingress.kubernetes.io/ssl-policy":"ELBSecurityPolicy-2016-08","alb.ingress.kubernetes.io/subnets":"subnet-0c4cb5452b630939e, subnet-0e5d3c389bfbefee9","alb.ingress.kubernetes.io/success-codes":"302","kubernetes.io/ingress.class":"alb"},"labels":{"app":"api-gateway"},"name":"api-gateway-ingress","namespace":"orbix-mvp"},"spec":{"rules":[{"host":"api-gateway.orbixpay.com","http":{"paths":[{"backend":{"serviceName":"api-gateway","servicePort":3000},"path":"/*"}]}}]}}
  
  Events:  &lt;none&gt;
  </code></pre>
  
  <p>I've also added a self-signed SSL certificate as per the instructions over here:</p>
  
  <p><a href="https://kubernetes.github.io/ingress-nginx/user-guide/tls/" rel="noreferrer">https://kubernetes.github.io/ingress-nginx/user-guide/tls/</a></p>
  
  <p>On edit the Ingress looks like the following:</p>
  
  <pre><code>apiVersion: extensions/v1beta1
  kind: Ingress
  metadata:
    annotations:
      alb.ingress.kubernetes.io/scheme: internet-facing
      alb.ingress.kubernetes.io/ssl-policy: ELBSecurityPolicy-2016-08
      alb.ingress.kubernetes.io/subnets: subnet-0c4cb5452b630939e, subnet-0e5d3c389bfbefee9
      alb.ingress.kubernetes.io/success-codes: "302"
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"extensions/v1beta1","kind":"Ingress","metadata":{"annotations":{"alb.ingress.kubernetes.io/scheme":"internet-facing","alb.ingress.kubernetes.io/ssl-policy":"ELBSecurityPolicy-2016-08","alb.ingress.kubernetes.io/subnets":"subnet-0c4cb5452b630939e, subnet-0e5d3c389bfbefee9","alb.ingress.kubernetes.io/success-codes":"302","kubernetes.io/ingress.class":"alb"},"labels":{"app":"api-gateway"},"name":"api-gateway-ingress","namespace":"orbix-mvp"},"spec":{"rules":[{"host":"api-gateway.orbixpay.com","http":{"paths":[{"backend":{"serviceName":"api-gateway","servicePort":3000},"path":"/*"}]}}]}}
      kubernetes.io/ingress.class: alb
    creationTimestamp: "2019-03-07T14:57:22Z"
    generation: 8
    labels:
      app: api-gateway
    name: api-gateway-ingress
    namespace: orbix-mvp
    resourceVersion: "2230952"
    selfLink: /apis/extensions/v1beta1/namespaces/orbix-mvp/ingresses/api-gateway-ingress
    uid: 4fd70b63-40e9-11e9-bfe7-024a064218ac
  spec:
    rules:
    - http:
        paths:
        - backend:
            serviceName: api-gateway
            servicePort: 3000
          path: /*
    tls:
    - hosts:
      - api-gateway.orbixpay.com
      - 4ae1e4ba-orbixmvp-apigatew-c613-1873743362.eu-central-1.elb.amazonaws.com
      secretName: api-gateway.orbixpay.com
  status:
    loadBalancer:
      ingress:
      - hostname: 4ae1e4ba-orbixmvp-apigatew-c613-1873743362.eu-central-1.elb.amazonaws.com
  </code></pre>
  
  <p>Thing is, the Ingress doesn't resolve over TLS - it just times out. As far as I'm aware this is the correct way to set it up, so I'm rather clueless as to why it's not working. Any help is appreciated.</p>