Can't have multiple listener rules on an ingress that only points to one svc.

[sophie-warner-annalise-ai]

Just wanted to validate that my understanding is correct before I give up and try a different approach.

I have an ingress that only points to a single service. I need two separate listener rules, one for customer traffic and one for a health check.

ingress:
    ...
    alb.ingress.kubernetes.io/transforms.my-svc: >     
      [
          {
              "type": "url-rewrite",
              "urlRewriteConfig": {
                  "rewrites": [
                      {
                          "regex": ".*",
                          "replace": "$1.healthcheck.example.com"
                      }
                  ]
              }
          }
      ]
    alb.ingress.kubernetes.io/conditions.my-svc: >
      [
        {
          "field":"source-ip",
          "sourceIpConfig":{"values":[""]}
        }
      ]
     ...
  rules:
    - host: "*.example.com"
      http:
        paths:
          - backend:
              service:
                name: my-svc
                port:
                  number: 443
            path: /
            pathType: Prefix

If I implement the above it creates one rule which violated validation A rule can only have '5' condition values and regex values.

Model created

    "AWS::ElasticLoadBalancingV2::ListenerRule": {
      "443:1": {
        "spec": {
          "listenerARN": {
            "$ref": "#/resources/AWS::ElasticLoadBalancingV2::Listener/443/status/listenerARN"
          },
          "priority": 1,
          "actions": [
            {
              "type": "forward",
              "forwardConfig": {
                "targetGroups": [
                  {
                    "targetGroupARN": {
                      "$ref": "#/resources/AWS::ElasticLoadBalancingV2::TargetGroup/my-svc/public-ingress-my-svc:443/status/targetGroupARN"
                    }
                  }
                ]
              }
            }
          ],
          "conditions": [
            {
              "field": "source-ip",
              "sourceIPConfig": {
                "values": [
                  ...
                ]
              }
            },
            {
              "field": "host-header",
              "hostHeaderConfig": {
                "values": [
                  "*.example.com"
                ]
              }
            },
            {
              "field": "path-pattern",
              "pathPatternConfig": {
                "values": [
                  "/*",
                  "/healthz/ready"
                ]
              }
            }
          ],
          "transforms": [
            {
              "type": "url-rewrite",
              "urlRewriteConfig": {
                "rewrites": [
                  {
                    "regex": ".*",
                    "replace": "$1.healthcheck.example.com"
                  }
                ]
              }
            }
          ],
          "tags": { }
        }
      }
    },

I can't find a way to create a new separate rule without creating a duplicate service which seems messy.

[zac-nixon]

one for a health check.

Is the health check performed through an ELB listener or is this the target group health check?