Kubernetes 证书管理器正在尝试使用dns-01而不是https-01解析程序

我正在尝试使用HTTP质询验证通过

证书管理器

为我的Kubernetes群集颁发证书。但是，由于某些原因，质询顺序试图使用未配置的

dns-01

验证器

我试图找出不同的配置，再次删除和安装

certmanager

，但没有任何帮助。它正在从其他ACME客户端运行

我正在使用

certmanager

v1.2.0

这是我的

clustersuiser

，带有

http-01

解算器：

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: clusterissuer-test-acme
  #namespace: default
spec:
  acme:
    server: https://lab03.test.com:8432/acme/directory
    # Email address used for ACME registration
    email: k8s-security-team@example.org
    # Name of a secret used to store the ACME account private key
    privateKeySecretRef:
      name: issuer-acme-secret
    # Enable HTTP01 validations
    solvers:
    # An empty 'selector' means that this solver matches all domains
    - selector: {}
      http01:
        ingress:
          class: public

这是我试图颁发的证书：

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: cert-lab05-test-com
  namespace: default
spec:
  secretName: cert--secret-lab05-test-com
  renewBefore: 365h # 15d
  issuerRef:
    name: clusterissuer-test-acme
    kind: ClusterIssuer
  commonName: lab05.test.com
  dnsNames:
  - lab05.test.com

我得到了以下错误：

Status:
  Authorizations:
    Challenges:
      Token:        QHYyjqayGWufzC6kz313UwkUvRillXZWdBgoEVKyfe83w32SXvaSgkxvYJEKUViVM884eQAAAXnDf-lT
      Type:         dns-01
      URL:          https://lab03.test.com:8432/acme/authz/yFwhSs9x3y4UcyPxCTXHfsSKhhpD1AAAAXnDf-lT/2
    Identifier:     lab05.test.com
    Initial State:  pending
    URL:            https://lab03.test.com:8432/acme/authz/yFwhSs9x3y4UcyPxCTXHfsSKhhpD1AAAAXnDf-lT
    Wildcard:       false
  Finalize URL:     https://lab03.test.com:8432/acme/order/c3a10096-ad3a-4e48-9160-f4d39a617299-7/finalize
  State:            pending
  URL:              https://lab03.test.com:8432/acme/order/c3a10096-ad3a-4e48-9160-f4d39a617299-7
Events:
  Type     Reason  Age   From          Message
  ----     ------  ----  ----          -------
  Warning  Solver  5m9s  cert-manager  Failed to determine a valid solver configuration for the set of domains on the Order: no configured challenge solvers can be used for this challenge

---

我不明白根据

clustersissuer

设置，当质询类型应该是

http-01

时，质询类型为什么是

dns-01

。

您是否正在尝试颁发通配符证书？这些仅允许dns01验证。不，它不是通配符证书