My setup is EKS with cert-manager and godaddy addon to apply certificates on domains that not in AWS. Godaddy plugin is using Godaddy api, once the ingress is been created, the webhook create record and it been used to generate the certificate. Actually I'm getting error: { "type": "dns-01", …

Thank you, but seem the issue is not with GoDaddy API, because the record is been created and deleted as expected, but during this duration the validation is failed not sure why. I've kept the certificate for the night, and a morning surprise - the cert-manager was able to validate and created the c…

[image] david-gh: because the record is been created and deleted as expected, but during this duration the validation is failed not sure why The validation failed because a Let's Encrypt Auth server did not see that TXT record. If you are sure it was present in the public DNS there are two l…

I'll try to add a delay before deleting the record (current is around 1 minute). Thx.

No, you need to add a delay after adding the TXT record not before deleting it. When you add the record GoDaddy has to sync all their DNS servers world-wide. Then Let's Encrypt (or anyone) will see the TXT record from anywhere. Often a DNS API returns immediately but that does not mean that sync …

Sorry I was not clear. But saying adding delay before deleting it, is the same meaning for me to say a delay after adding the TXT record. In the same time I've opened an issue to support on adding delay in Godaddy-webhook Once I'll have the option, how much would you recommended? 5 minutes? 1 hour…

Just start small and increase as needed. Consider trying two minutes, if you are already waiting for one. If that isn'tong enough, increase it some more.

I agree with linkp. I will also mention that cert-manager checks for the TXT record before telling Let's Encrypt ACME Server that it is ready. However, it can only check from its own perspective and not every location world-wide that your DNS provider might have a DNS Server that needs to sync. I…

Challenge failed and got error DNS problem: NXDOMAIN looking up TXT

Help

MikeMcQ September 16, 2024, 1:50pm 2

I moved your topic to the Help section. It asks for specific info when posting in that section but in this case your problem is likely due to a GoDaddy change described here

Topic		Replies	Views
GoDaddy DNS failure Help	6	557	May 22, 2024
DNS Challenge with GoDaddy API Failed Help	3	1310	April 5, 2024
DNS problem: NXDOMAIN looking up TXT, 3 zone, 9 san, problem with 1 san Help	13	723	March 5, 2024
Unable to check the TXT record: ### Unexpected HTTP status: 403 Help	5	933	January 12, 2024
Certbot renewal failed to authenticate some domains Help	7	245	May 19, 2025

Challenge failed and got error DNS problem: NXDOMAIN looking up TXT

Related topics