CertificateRequest does not work

Dear Support

Please help me.

I can not generate certificate via cert-manager kubernetes

apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer
metadata:
name: letsencrypt-prod
spec:
acme:
email: test@example.com
server: https://acme-v02.api.letsencrypt.org/directory
privateKeySecretRef:
name: letsencrypt-prod
solvers:
- http01:
ingress:
class: nginx-external

test.k8s.aws-dev.kobil.com
etcd.test.k8s.aws-dev.kobil.com
prometheus.test.k8s.aws-dev.kobil.com
alertmanager.test.k8s.aws-dev.kobil.com
grafana.test.k8s.aws-dev.kobil.com
oc-agent.test.k8s.aws-dev.kobil.com
kibana.test.k8s.aws-dev.kobil.com
jaeger.test.k8s.aws-dev.kobil.com

Hi @Javid907

checking your first domain name - https://check-your-website.server-daten.de/?q=test.k8s.aws-dev.kobil.com

Host T IP-Address is auth. ∑ Queries ∑ Timeout
test.k8s.aws-dev.kobil.com Name Error yes 1 0
www.test.k8s.aws-dev.kobil.com Name Error yes 1 0

There is no ip address defined. So you can't use http validation.

Read

Hi

test.k8s.aws-dev.kobil.com this domain for example I wrote.

Example real domain: grafana.eks-cluster-ndtxwkzsyu.k8s.aws.dev.kobil.com/

Please anyone Can help me ?

You're rate limited by the 50 certificates per week limit for kobil.com - Let's Debug .

Can also be confirmed by trying to issue a certificate from Certbot:

There were too many requests of a given type :: Error creating new order :: too many certificates already issued for: kobil.com: see Rate Limits - Let's Encrypt

Nothing you can really do except wait a day or two. If you need >50 certs per week (excluding renewals), then you should probably apply for a rate limit exemption (the link is on Rate Limits - Let's Encrypt), but these take a few weeks to process.

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.