lb/Analyze Failed Caa Check

Analyze domains in “FAILED_CAA_CHECKING” or “FAILED_CAA_FORBIDDEN” state.

Product: Load balancing
Step Type: AUTOMATED STEP

Description

None

Failure Reason

The following domains are in FAILED_CAA_CHECKING or FAILED_CAA_FORBIDDEN state: {domains} for SSL certificate “{name}”. This indicates misconfigured CAA records. CAA records authorize specific Certificate Authorities to issue certificates for the domain.

Failure Remediation

Ensure the CAA records are configured correctly. Refer to the documentation for instructions on configuring CAA records: https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa