ACME challenge error with google CloudDNS

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. https://crt.sh/?q=example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
www.skgk8s.com

I ran this command:
kubectl create certificate
followed by
kubectl describe challenge

apiVersion: cert-manager.io/v1alpha3
kind: Certificate
metadata:
name: test
namespace: default
spec:
secretName: test-tls
issuerRef:
name: letsencrypt-staging
dnsNames:

It produced this output:

Accepting challenge authorization failed: acme: authorization error for skgk8s.com: 400 urn:ietf:params:acme:error:dns: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.skgk8s.com - check that a DNS record exists for this domain

My web server is (include version):
i don’t have a web server yet.
The operating system my web server runs on is (include version):
i have no web server. i am trying to create certificate

My hosting provider, if applicable, is:
Google

I can login to a root shell on my machine (yes or no, or I don’t know):
Yes

I’m using a control panel to manage my site (no, or provide the name and version of the control panel):
Google Cloud DNS

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):
I am using Kubernetes CERT Manager version v0.16.1

2

So you’re using a DNS challenge to prove control of your domain, but the acme client you are using is not creating the DNS TXT record for you. You can see that here:

https://toolbox.googleapps.com/apps/dig/

Screenshot_20200816-155651_Samsung Internet
Screenshot_20200816-155651_Samsung Internet1440×3040 227 KB

3

Hi @skg

that's

not your domain, because that domain name isn't registered - see https://check-your-website.server-daten.de/?q=skgk8s.com

Host Type IP-Address is auth. ∑ Queries ∑ Timeout
skgk8s.com Name Error yes 1 0
www.skgk8s.com Name Error yes 1 0

You don't need an A-record.

But you must be the domain owner.

But there is no domain owner, no name server of that domain.

Register that domain name or use another domain name.

4

That explains a lot. :laughing: Didn't think to check that.

5

Thanks a lot! Sorry, i have never done domain registration. I created the DNS Zone and domain in Google Cloud DNS as below

image
image1224×708 35.6 KB

The _acme-challenge.skgk8s.com are created by me manually.
Please advise how to register the domain

6

Until you register the domain name, you don’t own it. You need to purchase registration of the domain name through a registrar.

Here’s a place to get started:

7

Thanks a lot! for all the suggestions