等待订单状态的证书颁发 "pending"

Question

我运行遇到了使用 cert-manager 处理 tls 证书的问题，我正在关注文档并添加了一些额外内容以使用 Traefik 作为入口。

目前，我有这个 YAML 个文件：

集群-issuer.yaml

apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer
metadata:
  name: letsencrypt-staging
  namespace: secure-alexguedescom
spec:
  acme:
    email: user@gmail.com
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      # Secret resource used to store the account's private key.
      name: letsencrypt-staging
    # Add a single challenge solver, HTTP01 using nginx
    solvers:
      - selector: {}
        http01:
          ingress:
            class: traefik-cert-manager

traefik-ingress.yaml

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    # add an annotation indicating the issuer to use.
    cert-manager.io/cluster-issuer: letsencrypt-staging
  name: secure-alexguedescom-ingress-http
  namespace: secure-alexguedescom
spec:
  rules:
  - host: secure.alexguedes.com
    http:
      paths:
      - backend:
          serviceName: secure-alexguedescom-nginx
          servicePort: 80
        path: /
  tls: 
  - hosts:
    - secure.alexguedes.com
    secretName: secure-alexguedescom-cert

cert-staging.yaml

apiVersion: cert-manager.io/v1alpha2
kind: Certificate
metadata:
  name: secure-alexguedescom-cert
  namespace: secure-alexguedescom
spec:
  commonName: secure.alexguedes.com
  secretName: letsencrypt-staging
  dnsNames:
    - secure.alexguedes.com
  issuerRef:
    name: letsencrypt-staging
    kind: ClusterIssuer

正在检查证书我收到此错误消息：

Message: Issuing certificate as Secret does not contain a certificate
Reason: MissingData

同时检查 certificaterequest 我有这个日志消息：

Status:
  Conditions:
    Last Transition Time:  2020-08-16T00:32:01Z
    Message:               Waiting on certificate issuance from order secure-alexguedescom/secure-alexguedescom-cert-q8w5p-1982372682: "pending"
    Reason:                Pending
    Status:                False
    Type:                  Ready
Events:
  Type    Reason        Age   From          Message
  ----    ------        ----  ----          -------
  Normal  OrderCreated  11m   cert-manager  Created Order resource secure-alexguedescom/secure-alexguedescom-cert-q8w5p-1982372682
  Normal  OrderPending  11m   cert-manager  Waiting on certificate issuance from order secure-alexguedescom/secure-alexguedescom-cert-q8w5p-1982372682: ""

我不确定哪一块是错的，使用 Helm v2 with Tiller 和 k8s v1.7

有什么想法吗？

提前致谢

Answer 1

letsencrypt 证书的典型问题是 letsencrypt 本身无法验证您的身份以及您拥有域。在这种情况下，alexguedes.com.

用 cert-manager 你可以做到 Domain Validation and HTTP Validation。根据发布的 ClusterIssuer，您正在进行 HTTP 验证。因此，您需要确保 secure.alexguedes.com 解析为全球可用的 IP 地址，并且 Traefik 端口 443 正在侦听该 IP 地址。

等待订单状态的证书颁发 "pending"

Waiting on certificate issuance from order status "pending"

ssl

kubernetes

lets-encrypt

cert-manager

k3s