带有通配符和 Cloudflare DNS 的证书管理器，停留在 'OrderCreated'

Question

我正在尝试让 cert-manager 和 letsencrypt 为通配符域工作。我已将通配符 A host 指向负载均衡器 IP (GKE)。这是秘密和发行人：

apiVersion: v1
kind: Secret
metadata:
  name: cloudflare-api-key
  namespace: cert-manager
type: Opaque
data:
  apikey: BASE_64_ENCODED_API_KEY
---
apiVersion: certmanager.k8s.io/v1alpha1
kind: ClusterIssuer
metadata:
  name: letsencrypt-staging
  namespace: cert-manager
spec:
  acme:
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    email: EMAIL
    privateKeySecretRef:
      name: letsencrypt-staging
    solvers:
      - dns01:
          cloudflare:
            email: EMAIL
            apiKeySecretRef:
              name: cloudflare-api-key
              key: apikey

这是我的入口：

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: apps-ingress
  annotations:
    kubernetes.io/ingress.class: nginx
    certmanager.k8s.io/cluster-issuer: letsencrypt-staging
spec:
  tls:
    - hosts:
        - "*.sampledomain.com"
      secretName: letsencrypt-staging
  rules:
    - host: phpmyadmin.sampledomain.com
      http:
        paths:
          - backend:
              serviceName: phpmyadmin
              servicePort: 8081

事件停留在 'OrderCreated'。在检查日志时：

E0817 08:42:45.872348       1 base_controller.go:189] cert-manager/controller/challenges "msg"="re-queuing item  due to error processing" "error"="Cloudflare API Error \n\t Error: 9103: Unknown X-Auth-Key or X-Auth-Email" "key"="default/letsencrypt-staging-3055668421-0"

Answer 1

我的电子邮件地址有错字：|

带有通配符和 Cloudflare DNS 的证书管理器，停留在 'OrderCreated'

Cert-managed with wilcard and Cloudflare DNS, stuck at 'OrderCreated'

kubernetes

lets-encrypt

nginx-ingress

cert-manager