Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(route53): delegation fails with public and private hosted zones with same name #30439

Merged
merged 6 commits into from
Jun 11, 2024

Conversation

samson-keung
Copy link
Contributor

Issue # (if applicable)

Closes #30262.

Reason for this change

Route53 does not support subdomain delegation on Private Hosted Zones (source). CrossAccountZoneDelegationRecord should ignore Private Hosted Zones instead of throwing error.

Description of changes

In CrossAccountZoneDelegationRecord handler, filter out Private Hosted Zones.

Description of how you validated changes

Deployed a stack that uses the updated CrossAccountZoneDelegationRecord handler where the parent account has both public and private hosted zones with the same domain name.

Checklist


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

@github-actions github-actions bot added bug This issue is a bug. effort/medium Medium work item – several days of effort p1 labels Jun 3, 2024
@aws-cdk-automation aws-cdk-automation requested a review from a team June 3, 2024 16:27
@mergify mergify bot added the contribution/core This is a PR that came from AWS. label Jun 3, 2024
Copy link
Collaborator

@aws-cdk-automation aws-cdk-automation left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The pull request linter has failed. See the aws-cdk-automation comment below for failure reasons. If you believe this pull request should receive an exemption, please comment and provide a justification.

A comment requesting an exemption should contain the text Exemption Request. Additionally, if clarification is needed add Clarification Request to a comment.

@samson-keung samson-keung changed the title fix(route53): cross account delegation fails with public and privates hosted zones with same name fix(route53): cross account delegation fails with public and private hosted zones with same name Jun 3, 2024
@samson-keung samson-keung changed the title fix(route53): cross account delegation fails with public and private hosted zones with same name fix: cross account delegation fails with public and private hosted zones with same name Jun 3, 2024
@samson-keung samson-keung marked this pull request as ready for review June 3, 2024 16:34
@samson-keung samson-keung marked this pull request as draft June 3, 2024 19:00
@samson-keung samson-keung changed the title fix: cross account delegation fails with public and private hosted zones with same name fix: route53 CrossAccountZoneDelegationRecord fails with public and private hosted zones with same name Jun 4, 2024
@samson-keung samson-keung marked this pull request as ready for review June 4, 2024 07:58
@samson-keung samson-keung changed the title fix: route53 CrossAccountZoneDelegationRecord fails with public and private hosted zones with same name fix(route53): CrossAccountZoneDelegationRecord fails with public and private hosted zones with same name Jun 4, 2024
@samson-keung samson-keung changed the title fix(route53): CrossAccountZoneDelegationRecord fails with public and private hosted zones with same name fix: route53 CrossAccountZoneDelegationRecord fails with public and private hosted zones with same name Jun 4, 2024
@samson-keung samson-keung changed the title fix: route53 CrossAccountZoneDelegationRecord fails with public and private hosted zones with same name fix: route53 CrossAccountZoneDelegationRecord fails with public and private hosted zones with same name Jun 4, 2024
@samson-keung samson-keung changed the title fix: route53 CrossAccountZoneDelegationRecord fails with public and private hosted zones with same name fix( route53): CrossAccountZoneDelegationRecord fails with public and private hosted zones with same name Jun 4, 2024
@samson-keung samson-keung changed the title fix( route53): CrossAccountZoneDelegationRecord fails with public and private hosted zones with same name fix(route53): CrossAccountZoneDelegationRecord fails with public and private hosted zones with same name Jun 4, 2024
@samson-keung samson-keung changed the title fix(route53): CrossAccountZoneDelegationRecord fails with public and private hosted zones with same name fix(route53): cross accountdelegation fails with public and private hosted zones with same name Jun 4, 2024
@samson-keung samson-keung changed the title fix(route53): cross accountdelegation fails with public and private hosted zones with same name fix(route53): cross account delegation fails with public and private hosted zones with same name Jun 4, 2024
@samson-keung samson-keung changed the title fix(route53): cross account delegation fails with public and private hosted zones with same name fix(route53): delegation fails with public and private hosted zones with same name Jun 5, 2024
@aws-cdk-automation aws-cdk-automation dismissed their stale review June 5, 2024 17:48

✅ Updated pull request passes all PRLinter validations. Dismissing previous PRLinter review.

@aws-cdk-automation aws-cdk-automation added the pr/needs-maintainer-review This PR needs a review from a Core Team Member label Jun 5, 2024
Copy link
Contributor

mergify bot commented Jun 11, 2024

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@aws-cdk-automation aws-cdk-automation removed the pr/needs-maintainer-review This PR needs a review from a Core Team Member label Jun 11, 2024
Copy link
Contributor

mergify bot commented Jun 11, 2024

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@aws-cdk-automation
Copy link
Collaborator

AWS CodeBuild CI Report

  • CodeBuild project: AutoBuildv2Project1C6BFA3F-wQm2hXv2jqQv
  • Commit ID: d24402d
  • Result: SUCCEEDED
  • Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

@mergify mergify bot merged commit 1f866c9 into aws:main Jun 11, 2024
9 checks passed
Copy link
Contributor

mergify bot commented Jun 11, 2024

Thank you for contributing! Your pull request will be updated from main and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@samson-keung samson-keung deleted the filter-private-hosted-zones branch June 11, 2024 17:00
mazyu36 pushed a commit to mazyu36/aws-cdk that referenced this pull request Jun 22, 2024
…ith same name (aws#30439)

### Issue # (if applicable)

Closes aws#30262.

### Reason for this change

Route53 does not support subdomain delegation on Private Hosted Zones ([source](https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/hosted-zone-private-considerations.html#hosted-zone-private-considerations-delegating-subdomain)). `CrossAccountZoneDelegationRecord` should ignore Private Hosted Zones instead of throwing error.

### Description of changes

In `CrossAccountZoneDelegationRecord` handler, filter out Private Hosted Zones.

### Description of how you validated changes

Deployed a stack that uses the updated `CrossAccountZoneDelegationRecord` handler where the parent account has both public and private hosted zones with the same domain name.

### Checklist
- [x] My code adheres to the [CONTRIBUTING GUIDE](https://github.com/aws/aws-cdk/blob/main/CONTRIBUTING.md) and [DESIGN GUIDELINES](https://github.com/aws/aws-cdk/blob/main/docs/DESIGN_GUIDELINES.md)

----

*By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license*
@aws-cdk-automation
Copy link
Collaborator

Comments on closed issues and PRs are hard for our team to see. If you need help, please open a new issue that references this one.

@aws aws locked as resolved and limited conversation to collaborators Jul 25, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
bug This issue is a bug. contribution/core This is a PR that came from AWS. effort/medium Medium work item – several days of effort p1
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CrossAccountZoneDelegationRecord: Validation fails for public and private hosted zone with the same name
3 participants