通配符域不适用于Route53

Question

我的解决方案在AWS集群中运行，该集群需要使用适当的证书托管在域中。我在集群中安装了cert-manager，并且我使用let-encrypt作为ClusterIssuer。但是我的DNS却有些不行

ClusterIssuer Yaml文件

apiVersion: certmanager.k8s.io/v1alpha1
kind: ClusterIssuer
metadata:
  name: letsencrypt
spec:
  acme:
    # The ACME server URL
    server: https://acme-v02.api.letsencrypt.org/directory
# Email address used for ACME registration
    email: {{ .Values.email }}
# Name of a secret used to store the ACME account private key
    privateKeySecretRef:
      name: letsencrypt
# Enable the DNS-01 challenge provider
    dns01:
      providers:
      - name: route53
        route53:
          region: us-east-1
          accessKeyID: <AccessKeyID>
          hostedZoneID: <HostedZoneId>
          secretAccessKeySecretRef:
            name: aws-meetingapp-dns
            key: AWS_SECRET_ACCESS_KEY

Certificate.yaml文件

apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  name: ambassador-certs
  namespace: {{ .Release.Namespace }}
spec:
  secretName: ambassador-certs
  issuerRef:
    name: letsencrypt
    kind: ClusterIssuer
  commonName: '{{ .Values.domain }}'
  dnsNames:
  - '{{ .Values.domain }}'
  acme:
    config:
    - dns01:
        provider: route53
      domains:
      - '{{ .Values.domain }}'

DNS条目