Kubernetes cert-manager issue

7/13/2020

I've deployed cert-manager on cluster. It was working. Recently i noticed that when i try open service which configured through ingress complaining about expired certificate. I checked in kubernetes certificate shown as its up to date. But when i open service via browser it says that cert expired.

I recreated issuer and certificate again and noticed that cert-manager didnt created "certificaterequest". and "order". So the question is how can i force cert-manager to create cert-request and order.

-- Amir Damirov
devops
kubernetes
nginx-ingress
ssl
ssl-certificate

1 Answer

7/14/2020

The first thing I'd would check is what is the actual expire date of the certificate that your browser is receiving while requesting the web page. You can check this by clicking the padlock near the address in your browser. If this looks correct, check your personal computer time and date whether it's showing the current one (not the future one).

If this is not the case then you can force issuing the certificate with the following methods:

  • Set the renewBefore field on the certificate resource to 1440h (two months before expire date. It should be enough to trigger the certificate reissuing.
  • Delete the secret first and then the certificate. This will cause the cert-manager to issue a new certificate.

Also check out this cert-manager issue on github.

-- acid_fuji
Source: StackOverflow