You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When completing Step 6 of the EKS Procedures, kubectl apply -f letsencrypt-issuer.yml (the file sample you provide with the email replaced) - failed with the following observed behavior
Observed Behaviour
Error after applying "letsencrypt-issuer.yml" from
"Error from server (InternalError): error when creating "letsencrypt-issuer.yml": Internal error occurred: failed calling webhook "webhook.cert-manager.io": failed to call webhook: Post "https://cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority"
Expected Behaviour
Should have received a "clusterissuer.cert-manager.io/forms-flow-idm created"
I had to apply two fixes to the process to get this to work:
Also, this cert-manager.io page shows that the letsencrypt-issuer.yml file should have one change. (See: https://cert-manager.io/docs/configuration/acme/http01/ ). Since version 1.12 of cert manager, within the solver section of the ACME specs: the last line of the file you provided should set - http01:ingress:ingressClassName and not http01:ingress:ingress. If I had tested cert-manager v1.11, it may not have required the "ingressClassName", but all of the cert-manager documentation references this version of the software.
The text was updated successfully, but these errors were encountered:
Bug Report
Please provide information about your setup
Steps to Reproduce
Complete through Step 5 of AWS EKS Procedures where you provide a command:
kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/**v1.0.1**/cert-manager.yaml
When completing Step 6 of the EKS Procedures, kubectl apply -f letsencrypt-issuer.yml (the file sample you provide with the email replaced) - failed with the following observed behavior
Observed Behaviour
Error after applying "letsencrypt-issuer.yml" from
"Error from server (InternalError): error when creating "letsencrypt-issuer.yml": Internal error occurred: failed calling webhook "webhook.cert-manager.io": failed to call webhook: Post "https://cert-manager-webhook.cert-manager.svc:443/mutate?timeout=10s": tls: failed to verify certificate: x509: certificate signed by unknown authority"
Expected Behaviour
Should have received a "clusterissuer.cert-manager.io/forms-flow-idm created"
I had to apply two fixes to the process to get this to work:
Update cert-manager version number to the latest version (or at least more recent that v1.0.1. I check their site and v1.12.3 was the most recent release, so the Step 5 was updated to:
kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/**v1.12.3**/cert-manager.yaml
Also, this cert-manager.io page shows that the letsencrypt-issuer.yml file should have one change. (See: https://cert-manager.io/docs/configuration/acme/http01/ ). Since version 1.12 of cert manager, within the solver section of the ACME specs: the last line of the file you provided should set - http01:ingress:ingressClassName and not http01:ingress:ingress. If I had tested cert-manager v1.11, it may not have required the "ingressClassName", but all of the cert-manager documentation references this version of the software.
The text was updated successfully, but these errors were encountered: