I've deployed cert-manager on cluster. It was working. Recently i noticed that when i try open service which configured through ingress complaining about expired certificate. I checked in kubernetes certificate shown as its up to date. But when i open service via browser it says that cert expired.
I recreated issuer and certificate again and noticed that cert-manager didnt created "certificaterequest". and "order". So the question is how can i force cert-manager to create cert-request and order.
The first thing I'd would check is what is the actual expire date of the certificate that your browser is receiving while requesting the web page. You can check this by clicking the padlock near the address in your browser. If this looks correct, check your personal computer time and date whether it's showing the current one (not the future one).
If this is not the case then you can force issuing the certificate with the following methods:
renewBefore
field on the certificate
resource to 1440h (two months before expire date
. It should be enough to trigger the certificate reissuing. secret
first and then the certificate
. This will cause the cert-manager
to issue a new certificate. Also check out this cert-manager issue on github.