mirror of
https://github.com/wahyd4/cert-manager.git
synced 2026-08-12 06:36:30 +10:00
Changes:
1. When there are multiple route53 hosted top zone and delegated
zones within the same account, cert-manager incorrectly uses
the top level domain as auth zone for which it doesn't have perms.
This DOSes AWS's IAM API.
2. This change adds the best match in determining auth zone while
looking up hosted zone IDs.
3. Defines a GetBestMatch util function to perform longest domain
matches.
4. Adds test cases
5. Fixes #3353
Signed-off-by: Supriya Premkumar <supriyapremkumar1@gmail.com>