Report this

What is the reason for this report?

Let's Encrypt on load balancer and Ingress (K8S)

Posted on June 25, 2019

Hello,

I have a Kubernetes cluster with a simple static page container serving for now, and the site on http:// shows up just fine. I set up LetsEncrypt in the load balancer admin panel according to this instruction: https://www.digitalocean.com/docs/networking/load-balancers/how-to/lets-encrypt, but on https:// it returns default backend - 404, and in the Ingress controller logs there are errors:

│ W0625 00:07:48.175103       6 backend_ssl.go:49] error obtaining PEM from secret default/key-name: error retrieving secret default/key-name: secret default/key-name was not found                                                                            │
│ W0625 00:07:48.175270       6 controller.go:1020] ssl certificate "default/key-name" does not exist in local store              

I don’t know the actual key location or the files to try to manually configure that, only the name in the admin panel.

ingress.yml fragment

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: ingress-main
  annotations:
     kubernetes.io/ingress.class: nginx
     kubernetes.io/tls-acme: "true"
spec:
  tls:
  - hosts:
    - mydomain.com
    secretName: key-name

What is the issue, and how to fix this, what am I missing here? Thank you very much for your help. Jakub

The developer cloud

Scale up as you grow — whether you're running one virtual machine or ten thousand.

Start building today

From GPU-powered inference and Kubernetes to managed databases and storage, get everything you need to build, scale, and deploy intelligent applications.