0

i have a cluster on AKS, that is using traefik to serve a simple http service. I'm trying to use letsencrypt, the DNS is setted up and resolves to aks public ip address correctly but all certificate requests becomes stuck and pending, below my configuration (i also have a web route, same as websecure):

---
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
  name: service-ingress-secure
spec:
  entryPoints:
    - websecure
  routes:
  - match: Host(`service.domain.io`)
    kind: Rule
    services:
    - name: microbot-service
      port: 443
  tls:
    certResolver: myresolver

---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: service-cert
  namespace: default
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: mail@gmail.com
    privateKeySecretRef:
      name: service-cert
    solvers:
    - http01:
        ingress:
          class: traefik

---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: service.domain.io
  namespace: default
spec:
  secretName: service.domain.io-tls
  issuerRef:
    name: pistolino-cert
    kind: ClusterIssuer
  commonName: service.domain.io
  dnsNames:
  - service.domain.io
Rolling Coders
  • 1
  • Hi Rolling Coders welcome to S.F. You'll want to inspect the logs of the cert-manager Pod(s), as it usually logs any errors that come from LetsEncrypt. Good luck – mdaniel May 07 '22 at 22:46

0 Answers0