I am using k8s cluster which includes cert-manager for SSL.
It’s a basic setup following: https://www.digitalocean.com/community/tutorials/how-to-set-up-an-nginx-ingress-with-cert-manager-on-digitalocean-kubernetes
However, in the result I am getting errors on automatic k8s upgrades:
Validating webhook with a TimeoutSeconds value greater than 29 seconds will block upgrades.
Validating webhook is configured in such a way that it may be problematic during upgrades.
My understanding is those are due to timeoutSeconds and failurePolicy, as seen here: https://github.com/jetstack/cert-manager/search?q=failurePolicy
timeoutSeconds: {{ .Values.webhook.timeoutSeconds }}
failurePolicy: Fail
What’s the correct way to have both cert-manager and k8s auto-upgrades?
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and AI-native businesses
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Start building today
From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.
