lb/Analyze Failed Caa Check
Analyze domains in “FAILED_CAA_CHECKING” or “FAILED_CAA_FORBIDDEN” state.
Product: Load balancing
Step Type: AUTOMATED STEP
Description
None
Failure Reason
The following domains are in FAILED_CAA_CHECKING or FAILED_CAA_FORBIDDEN state: {domains} for SSL certificate “{name}”. This indicates misconfigured CAA records. CAA records authorize specific Certificate Authorities to issue certificates for the domain.
Failure Remediation
Ensure the CAA records are configured correctly. Refer to the documentation for instructions on configuring CAA records: https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa