Certificate failed to renew

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
staging.predictor.vodacomfantasy.com

I ran this command:
kubectl describe certificate

It produced this output:
Name: tls-secret
Namespace: ingress-basic
Labels:
Annotations: kubectl.kubernetes.io/last-applied-configuration:
{"apiVersion":"cert-manager.io/v1alpha2","kind":"Certificate","metadata":{"annotations":{},"name":"tls-secret","namespace":"ingress-basic"...
API Version: cert-manager.io/v1
Kind: Certificate
Metadata:
Creation Timestamp: 2021-07-15T07:39:51Z
Generation: 1
Managed Fields:
API Version: cert-manager.io/v1
Fields Type: FieldsV1
fieldsV1:
f:status:
f:conditions:
f:nextPrivateKeySecretName:
f:notAfter:
f:notBefore:
f:renewalTime:
Manager: controller
Operation: Update
Time: 2021-07-15T07:39:51Z
API Version: cert-manager.io/v1alpha2
Fields Type: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.:
f:kubectl.kubernetes.io/last-applied-configuration:
f:spec:
.:
f:dnsNames:
f:issuerRef:
.:
f:kind:
f:name:
f:secretName:
Manager: kubectl
Operation: Update
Time: 2021-07-15T07:39:51Z
Resource Version: 75921201
UID: 1e99fd02-2ec8-49a6-a531-f5959afb6807
Spec:
Dns Names:
staging.predictor.vodacomfantasy.com
Issuer Ref:
Kind: ClusterIssuer
Name: letsencrypt-prod
Secret Name: tls-secret
Status:
Conditions:
Last Transition Time: 2021-07-15T07:39:51Z
Message: Existing issued Secret is not up to date for spec: [spec.commonName spec.dnsNames]
Observed Generation: 1
Reason: SecretMismatch
Status: True
Type: Issuing
Last Transition Time: 2021-07-15T07:39:51Z
Message: Existing issued Secret is not up to date for spec: [spec.commonName spec.dnsNames]
Observed Generation: 1
Reason: SecretMismatch
Status: False
Type: Ready
Next Private Key Secret Name: tls-secret-f8wkr
Not After: 2020-12-25T09:34:11Z
Not Before: 2020-09-26T09:34:11Z
Renewal Time: 2020-11-25T09:34:11Z
Events:
Type Reason Age From Message


Normal Issuing 55m cert-manager Existing issued Secret is not up to date for spec: [spec.commonName spec.dnsNames]
Normal Reused 55m cert-manager Reusing private key stored in existing Secret resource "tls-secret"
Normal Requested 55m cert-manager Created new CertificateRequest resource "tls-secret-vgjkj"

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.