secret argocd/argo-cert-prod 已更新，用于入口注释
secret argocd/argo-cert-prod was updated and it is used in ingress annotations
我使用 ArgoCD 并通过 NGINX ingress 发布了 UI 如下：
apiVersion: cert-manager.io/v1alpha2
kind: Certificate
metadata:
name: svc-cert-prod
namespace: argocd
spec:
secretName: argo-cert-prod
issuerRef:
name: letsencrypt-prod
kind: ClusterIssuer
commonName: "cd.example.io"
dnsNames:
- "cd.example.io"
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: argocd-server-ingress
namespace: argocd
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
kubernetes.io/ingress.class: nginx
kubernetes.io/tls-acme: "true"
nginx.ingress.kubernetes.io/ssl-passthrough: "true"
# If you encounter a redirect loop or are getting a 307 response code
# then you need to force the nginx ingress to connect to the backend using HTTPS.
#
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
spec:
rules:
- host: cd.example.io
http:
paths:
- backend:
serviceName: argocd-server
servicePort: https
path: /
tls:
- hosts:
- cd.example.io
secretName: argo-cert-prod
---
当我查看 NGINX 容器日志时，它显示
I0524 20:13:05.721610 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:05.920550 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:06.121675 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:06.321001 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:06.524940 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:06.720776 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:06.922470 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:07.122135 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing.
为什么每秒显示一次消息？我还安装了 https://goharbor.io/，它也使用 NGINX 入口。但是我没有收到来自 Harbor 的任何消息。
我使用 Rancher，它显示：
它负责间隔消息吗？
该消息意味着某些东西一直在更新您的秘密。
这可能是两个具有相同秘密名称的 Ingress 之间的冲突。
您正在使用 cert-manager，因此请检查您在此处使用的秘密名称对于该命名空间中的所有 Ingress 都是唯一的，并且没有其他使用该名称的秘密。
此外，请确保除了 cert-manager 之外没有任何其他尝试更新机密。也许你有其他东西可以处理试图用相同名称编写秘密的秘密。
更新： 根据您的更新 - 是的，它负责间隔消息。
我使用 ArgoCD 并通过 NGINX ingress 发布了 UI 如下：
apiVersion: cert-manager.io/v1alpha2
kind: Certificate
metadata:
name: svc-cert-prod
namespace: argocd
spec:
secretName: argo-cert-prod
issuerRef:
name: letsencrypt-prod
kind: ClusterIssuer
commonName: "cd.example.io"
dnsNames:
- "cd.example.io"
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: argocd-server-ingress
namespace: argocd
annotations:
cert-manager.io/cluster-issuer: letsencrypt-prod
kubernetes.io/ingress.class: nginx
kubernetes.io/tls-acme: "true"
nginx.ingress.kubernetes.io/ssl-passthrough: "true"
# If you encounter a redirect loop or are getting a 307 response code
# then you need to force the nginx ingress to connect to the backend using HTTPS.
#
nginx.ingress.kubernetes.io/backend-protocol: "HTTPS"
spec:
rules:
- host: cd.example.io
http:
paths:
- backend:
serviceName: argocd-server
servicePort: https
path: /
tls:
- hosts:
- cd.example.io
secretName: argo-cert-prod
---
当我查看 NGINX 容器日志时，它显示
I0524 20:13:05.721610 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:05.920550 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:06.121675 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:06.321001 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:06.524940 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:06.720776 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:06.922470 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing...
I0524 20:13:07.122135 7 store.go:448] secret argocd/argo-cert-prod was updated and it is used in ingress annotations. Parsing.
为什么每秒显示一次消息？我还安装了 https://goharbor.io/，它也使用 NGINX 入口。但是我没有收到来自 Harbor 的任何消息。
我使用 Rancher，它显示：
它负责间隔消息吗？
该消息意味着某些东西一直在更新您的秘密。
这可能是两个具有相同秘密名称的 Ingress 之间的冲突。
您正在使用 cert-manager，因此请检查您在此处使用的秘密名称对于该命名空间中的所有 Ingress 都是唯一的，并且没有其他使用该名称的秘密。
此外，请确保除了 cert-manager 之外没有任何其他尝试更新机密。也许你有其他东西可以处理试图用相同名称编写秘密的秘密。
更新： 根据您的更新 - 是的，它负责间隔消息。