Auto Renewal of cert-manager certificate is not happening

Help
1

Hi,

Please let us know how to resolve the issue of auto renewal of kubernetes cert-manager

Below is the error msg which we are getting.

cert-manager/controller/certificaterequests-issuer-vault "msg"="re-queuing item due to optimistic locking on resource" "key"="cert-manager/cert-manager-certificate-rv2hb" "error"="Operation cannot be fulfilled on certificaterequests.cert-manager.io "cert-manager-certificate-rv2hb": the object has been modified; please apply your changes to the latest version and try again"

Steps : We have installed latest version cert-manager v1.6.1 wit helm.
We have also upgraded cluster in the staging env.

We tried this yaml file

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: cert-manager-certificate
namespace: cert-manager
spec:
secretName: laika-staging-tls
duration: 2160h # 90 days (adjust as needed)
renewBefore: 360h # 15 days before expiration, cert-manager will attempt renewal
commonName: laika-staging
dnsNames:
- laika-staging.projectmetro.io
issuerRef:
group: cert-manager.io
kind: ClusterIssuer # Use "ClusterIssuer" if you are referencing a ClusterIssuer.
name: letsencrypt-prod

Please help us for auto renewing the certificates which it is going to expire on Aug 08th 2023.

Thanks
Naresh

1 Like
2

Hi @naresh.ede, and welcome to the LE community forum :slight_smile:

I don't see the cert that is expiring:

image

Also: moved topic to "HELP" category

3 Likes
3

Hi ,

Please find the below certificate details which is expired on 19th May 2023. We are working on extension time, help us out to resolve this.

"creationTimestamp": "2023-04-12T23:00:03.498-07:00",
"expireTime": "2023-05-18T14:34:59.000-07:00",
"id": "1888967619669271692",
"kind": "compute#sslCertificate",
"name": "k8s2-cr-nttmcovu-kl7uqvqnbzn2bjqy-97dd8056bb1c4472",
"selfLink": "projects/leafy-trainer-177311/global/sslCertificates/k8s2-cr-nttmcovu-kl7uqvqnbzn2bjqy-97dd8056bb1c4472",
"selfManaged": {

image
image970×751 56.5 KB

Thanks
Naresh

4

Hi,

Please find the certificate expiry details screenshot

image
image1920×1080 276 KB

Thanks
Naresh

5

Hi Team,

Post debugging we found that we have the below issue in staging environment.

image
image1273×598 150 KB

error : Error syncing to GCP: error running load balancer syncing routine: error initializing translator env: secrets "laika-staging-tls" not found

Please help us out in resolving this issue.

Thanks
Naresh

1 Like
6

Hi

Please find another screenshot.

image
image1915×129 9.71 KB

Thanks
Naresh

1 Like
8

That is a problem with your GCP configuration. This is not the best forum to help with that.

I googled parts of the error message and see suggestions on other forums.

A couple are:

2 Likes
9

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.