Solved

Kasten10 Ingress letsencrypt ACME challenge

  • 7 March 2022
  • 1 comment
  • 170 views

Userlevel 2

Hi,

I have a setup kasten10 on a microk8s single node cluster on a local server to backup my kubernetes cluster.

Everything from backup perspective is working fine so far, but i have a problem with the ingress and ACME challenge with letsencrypt.
The ACME challenge is working for my other services but I cant get it working with kasten10.

k10-ingress:
spec:
  ingressClassName: public
  rules:
  - host: kasten.dummy.com
    http:
      paths:
      - backend:
          service:
            name: gateway
            port:
              number: 8000
        path: /k10
        pathType: Prefix
  tls:
  - hosts:
    - kasten.dummy.com
    secretName: secret-kasten.dummy.com

Error on my ingress pod:
[error] 2102#2102: *88192 upstream timed out (110: Operation timed out) while connecting to upstream, client: 192.168.1.1, server: kasten.dummy.com, request: "GET /.well-known/acme-challenge/<challenge-code> HTTP/1.1", upstream: "http://10.1.206.218:8089/.well-known/acme-challenge/<challenge-code>", host: "kasten.dummy.com"


I can access the dashboard on https://kasten.dummy.com/k10/ but the certificate is a ingress dummy certificate.

 

Can anyone help me with that?
Thanks

icon

Best answer by lemassacre 15 March 2022, 20:10

View original

1 comment

Userlevel 2

I did set up my own CA now, which is also capable of creating certificates for the ingress resource (step ca). Now it is working.

Comment