Kubernetes 使用wilcard和Cloudflare DNS管理的证书,卡在';订单已创建';
我正在尝试让cert manager和letsencrypt为通配符域工作。我已经将通配符A主机指向负载平衡器IP(GKE)。以下是秘密和发布者:Kubernetes 使用wilcard和Cloudflare DNS管理的证书,卡在';订单已创建';,kubernetes,lets-encrypt,nginx-ingress,cert-manager,Kubernetes,Lets Encrypt,Nginx Ingress,Cert Manager,我正在尝试让cert manager和letsencrypt为通配符域工作。我已经将通配符A主机指向负载平衡器IP(GKE)。以下是秘密和发布者: apiVersion: v1 kind: Secret metadata: name: cloudflare-api-key namespace: cert-manager type: Opaque data: apikey: BASE_64_ENCODED_API_KEY --- apiVersion: certmanager.k8s.
apiVersion: v1
kind: Secret
metadata:
name: cloudflare-api-key
namespace: cert-manager
type: Opaque
data:
apikey: BASE_64_ENCODED_API_KEY
---
apiVersion: certmanager.k8s.io/v1alpha1
kind: ClusterIssuer
metadata:
name: letsencrypt-staging
namespace: cert-manager
spec:
acme:
server: https://acme-staging-v02.api.letsencrypt.org/directory
email: EMAIL
privateKeySecretRef:
name: letsencrypt-staging
solvers:
- dns01:
cloudflare:
email: EMAIL
apiKeySecretRef:
name: cloudflare-api-key
key: apikey
这是我的入口:
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: apps-ingress
annotations:
kubernetes.io/ingress.class: nginx
certmanager.k8s.io/cluster-issuer: letsencrypt-staging
spec:
tls:
- hosts:
- "*.sampledomain.com"
secretName: letsencrypt-staging
rules:
- host: phpmyadmin.sampledomain.com
http:
paths:
- backend:
serviceName: phpmyadmin
servicePort: 8081
事件停留在“OrderCreated”位置。检查日志时:
E0817 08:42:45.872348 1 base_controller.go:189] cert-manager/controller/challenges "msg"="re-queuing item due to error processing" "error"="Cloudflare API Error \n\t Error: 9103: Unknown X-Auth-Key or X-Auth-Email" "key"="default/letsencrypt-staging-3055668421-0"
我的电子邮件地址有一个输入错误:|