Skip to content

fix(aws-load-balancer-controller): add correctly spelled ingressValidationFailurePolicy - #1357

Open
buddy-n8n wants to merge 1 commit into
aws:masterfrom
buddy-n8n:fix/lbc-ingress-validation-failurepolicy-typo
Open

fix(aws-load-balancer-controller): add correctly spelled ingressValidationFailurePolicy#1357
buddy-n8n wants to merge 1 commit into
aws:masterfrom
buddy-n8n:fix/lbc-ingress-validation-failurepolicy-typo

Conversation

@buddy-n8n

@buddy-n8n buddy-n8n commented Aug 12, 2026

Copy link
Copy Markdown

Description

webhookConfig.ingressValdationFailurePolicy (missing the "i" in "Validation") is the value that the Ingress validating webhook's failurePolicy template field actually reads (templates/webhook.yaml). Because the key is misspelled, users who set the intuitively "correct" spelling, webhookConfig.ingressValidationFailurePolicy, get silently ignored:
Helm accepts unknown --set/values paths without error, so the webhook stays on the chart's default Fail policy instead of whatever the user intended.

Concretely, this bit a consumer trying to set failurePolicy: Ignore so the validating webhook wouldn't block Ingress deletion when LBC pods are unhealthy during cluster teardown. Their value silently no-opped and the webhook stayed on Fail.

This PR:

  • Adds webhookConfig.ingressValidationFailurePolicy as the primary, correctly spelled key.
  • Updates the template so it prefers the new key, falls back to the legacy misspelled key if only that is set, and otherwise defaults to Fail (unchanged default behavior).
  • Keeps webhookConfig.ingressValdationFailurePolicy working as a deprecated alias, so existing values files are unaffected.
  • Updates README.md and bumps the chart version (3.5.0 -> 3.5.1).

No behavior changes for existing users who don't touch this setting, or who already use the misspelled key. Users who previously tried the correctly spelled key and got silently ignored will now get the behavior they asked for.

Checklist

  • helm lint passes for the modified chart
  • Manually rendered templates/webhook.yaml with helm template for: default, old key only, new key only, and both keys set (new key wins): all four match expectations
  • Chart version bumped
  • README updated

Type of change

  • Bug fix (non-breaking change which fixes an issue)

…ationFailurePolicy

webhookConfig.ingressValdationFailurePolicy (missing the "i" in
"Validation") is the only key the ingress validating webhook's
failurePolicy template field reads, but the misspelling makes the
intent easy to miss and easy to set wrong by copying the "correct"
English spelling.

Add webhookConfig.ingressValidationFailurePolicy as the primary,
correctly spelled key. The template now prefers it, falls back to the
legacy misspelled key if only that is set, and defaults to Fail as
before. The old key keeps working unchanged for existing values files.
@buddy-n8n
buddy-n8n requested a review from a team as a code owner August 12, 2026 02:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant