fix: ensuring fetch and validate all certificates from the AWS service

internal/certificate/repository.go

@@ -59,7 +59,7 @@ func (r acmCertRepository) FindByFilter(filter CertFilter) ([]Certificate, error
 	var certs []Certificate
 	var certDiscoveryErr error
 
-	err := r.client.ListCertificatesPages(input, func(output *acm.ListCertificatesOutput, _ bool) bool {
+	err := r.client.ListCertificatesPages(input, func(output *acm.ListCertificatesOutput, lastPage bool) bool {
 		for _, acmCertSummary := range output.CertificateSummaryList {
 			acmCert, err := r.client.DescribeCertificate(&acm.DescribeCertificateInput{
 				CertificateArn: acmCertSummary.CertificateArn,
@@ -79,7 +79,8 @@ func (r acmCertRepository) FindByFilter(filter CertFilter) ([]Certificate, error
 				certs = append(certs, dnCert)
 			}
 		}
-		return true
+
+		return lastPage
 	})
 
 	if certDiscoveryErr != nil {

internal/cloudfront/service.go

@@ -217,7 +217,6 @@ func (s *Service) newDistribution(ingresses []k8s.CDNIngress, group string, shar
 		group,
 		s.Config,
 	)
-
 	var err error
 	var cert certificate.Certificate
 	if s.Config.TLSIsEnabled() {
@@ -260,16 +259,21 @@ func (s *Service) newDistribution(ingresses []k8s.CDNIngress, group string, shar
 // discoverCert returns the first found ACM Certificate that matches any Alternate Domain Name of the input Ingresses
 func (s *Service) discoverCert(ingresses []k8s.CDNIngress) (certificate.Certificate, error) {
 	errs := &multierror.Error{}
+	var matchingCert certificate.Certificate
+
 	for _, ing := range ingresses {
 		for _, dn := range ing.AlternateDomainNames {
 			cert, err := s.CertService.DiscoverByHost(dn)
-			if err == nil {
-				return cert, nil
+			if err != nil {
+				errs = multierror.Append(errs, fmt.Errorf("%q: %v", dn, err))
+			} else {
+				matchingCert = cert
 			}
-			errs = multierror.Append(errs, fmt.Errorf("%q: %v", dn, err))
+
 		}
 	}
-	return certificate.Certificate{}, errs.ErrorOrNil()
+
+	return matchingCert, errs.ErrorOrNil()
 }
 
 func (s *Service) s3Prefix(group string) string {