Certificate status playbook cert-manager
End-to-end view: Certificate, Request, Order, Challenge and the exact ACME failure reason
cmctl status certificate <name> -n <ns>
more cert-manager
all 16 commands →
Inspect issued secret contents
cmctl inspect secret <name> -n <ns>
DNS01 Route53 ClusterIssuer
kubectl apply -f - <<EOF
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-dns
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
privateKeySecretRef:
name: letsencrypt-dns
solvers:
- dns01:
route53:
region: us-east-1
hostedZoneID: <id>
EOF
Stuck ACME challenges
kubectl get challenges -A -o wide && kubectl describe challenge -n <ns> <name>
Install cert-manager via Helm
helm install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --set installCRDs=true
Check cert-manager pods
kubectl get pods -n cert-manager