I was trying to create ssl to a hostname connected to a service on kubernetes. Here’s my file i used:
##deployment.yaml
apiVersion: v1
kind: Service
metadata:
annotations:
service.beta.kubernetes.io/do-loadbalancer-enable-proxy-protocol: 'true'
service.beta.kubernetes.io/do-loadbalancer-hostname: "test-flask.rytalo.com"
name: flask-svc
labels:
app: flask
spec:
type: LoadBalancer
externalTrafficPolicy: Local
ports:
- port: 5000
targetPort: 5000
selector:
app: flask
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: flask-test
labels:
app: flask
spec:
replicas: 1
selector:
matchLabels:
app: flask
template:
metadata:
labels:
app: flask
spec:
containers:
- name: flask
image: <image>:<VERSION>
ports:
- containerPort: 5000
imagePullSecrets:
- name: regcred
##ingress.yaml
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
annotations:
kubernetes.io/ingress.class: nginx
cert-manager.io/cluster-issuer: letsencrypt-flask
nginx.ingress.kubernetes.io/rewrite-target: /
service.beta.kubernetes.io/do-loadbalancer-protocol: "https"
service.beta.kubernetes.io/do-loadbalancer-tls-ports: "443"
service.beta.kubernetes.io/do-loadbalancer-certificate-id: "cert-id"
name: ingress-tls-flask
spec:
tls:
- hosts:
- test-flask.example.com
secretName: key-acme
rules:
- host: test-flask.example.com
http:
paths:
- path: /
backend:
serviceName: flask-svc
servicePort: 5000
##issuer.yaml
apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer
metadata:
name: letsencrypt-flask
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
privateKeySecretRef:
name: key-acme
solvers:
- http01:
ingress:
#podTemplate:
# spec:
# nodeSelector:
# beta.kubernetes.io/os: linux
class: nginx
Here’s the events on my certificate:
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal Issuing 13m cert-manager Issuing certificate as Secret does not exist
Normal Generated 13m cert-manager Stored new private key in temporary Secret resource "key-acme-6k4gx"
Normal Requested 13m cert-manager Created new CertificateRequest resource "key-acme-r94pv"
And here’s the events on the certificateRequest:
Events:
Type Reason Age From Message
---- ------ ---- ---- -------
Normal IssuerNotFound 50m (x5 over 50m) cert-manager Referenced "ClusterIssuer" not found: clusterissuer.cert-manager.io "letsencrypt-flask" not found
how can i fix it ?..Thanks in advance