lb/Verify Dns Records

Checks the DNS records for specific domain associated with the SSL certificate.

Product: Load balancing
Step Type: GATEWAY

Description

None

Failure Reason

DNS records for domain {domain} resolve to IP addresses: {unresolved_ip_addresses}, which do not point to any load balancer associated with certificate {name}. This prevents certificate provisioning.

Failure Remediation

Configure DNS records for {domain} to point to the correct load balancer IP address(es) for certificate {name}. See the load balancer configuration for details. Check: https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#update-dns

Success Reason

DNS records for domain {domain} are correctly configured. All resolved IP addresses ({ip_addresses}) point to the load balancer(s) associated with certificate {name}.

Uncertain Reason

Some DNS records for domain {domain} resolve to the following unexpected IP address(es): {unresolved_ip_addresses}. While other records point to the expected IP addresses: {resolved_ip_addresses}. The unexpected IP addresses do not point to any load balancer associated with certificate {name}. This can cause certificate provisioning issues.