Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.
This morning my certificate for intelligenthost.net expired. The challenge looks like it went through, as it is no in pending. But the order seems to be stuck. My certs are created by the ClusterIssuer and my ingres. I pasted part of my ingress below.
My domain is:
I ran this command:
This is from my ingress.yaml
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
annotations:
kubernetes.io/ingress.class: nginx
cert-manager.io/cluster-issuer: "letsencrypt"
nginx.org/client-max-body-size: "0"
nginx.ingress.kubernetes.io/proxy-body-size: "0"
\ name: ingress-pacprops
namespace: default
spec:
tls:
- hosts:
It produced this output:
Events:
Type Reason Age From Message
Normal Created 7m54s cert-manager-orders Created Challenge resource "tls-intelligenthost-net-dvkrq-2517195546-2985535495" for domain "intelligenthost.net"
My web server is (include version):
v1.10.0
NAME READY STATUS RESTARTS AGE
pod/cert-manager-84bc577876-nm59k 1/1 Running 0 17m
pod/cert-manager-cainjector-99d4695d7-kpwb7 1/1 Running 0 17m
pod/cert-manager-webhook-7bff7c658f-kvwnh 1/1 Running 0 17m
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
service/cert-manager ClusterIP 10.245.163.80 9402/TCP 25d
service/cert-manager-webhook ClusterIP 10.245.159.49 443/TCP 25d
kubectl ClusterIssuer -o wide
NAME READY STATUS AGE
letsencrypt True The ACME account was registered with the ACME server 30m
letsencrypt-staging True The ACME account was registered with the ACME server 30m
The operating system my web server runs on is (include version):
n/a
My hosting provider, if applicable, is:
DigitalOcean
I can login to a root shell on my machine (yes or no, or I don't know):
I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):
kubectl version
Client Version: version.Info{Major:"1", Minor:"22", GitVersion:"v1.22.0", GitCommit:"c2b5237ccd9c0f1d600d3072634ca66cefdf272f", GitTreeState:"clean", BuildDate:"2021-08-04T18:03:20Z", GoVersion:"go1.16.6", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"22", GitVersion:"v1.22.13", GitCommit:"a43c0904d0de10f92aa3956c74489c45e6453d6e", GitTreeState:"clean", BuildDate:"2022-08-17T18:23:45Z", GoVersion:"go1.16.15", Compiler:"gc", Platform:"linux/amd64"}
