Skip to main content
Solved

Kasten10 Ingress letsencrypt ACME challenge


Hi,

I have a setup kasten10 on a microk8s single node cluster on a local server to backup my kubernetes cluster.

Everything from backup perspective is working fine so far, but i have a problem with the ingress and ACME challenge with letsencrypt.
The ACME challenge is working for my other services but I cant get it working with kasten10.

k10-ingress:
spec:
  ingressClassName: public
  rules:
  - host: kasten.dummy.com
    http:
      paths:
      - backend:
          service:
            name: gateway
            port:
              number: 8000
        path: /k10
        pathType: Prefix
  tls:
  - hosts:
    - kasten.dummy.com
    secretName: secret-kasten.dummy.com

Error on my ingress pod:
[error] 2102#2102: *88192 upstream timed out (110: Operation timed out) while connecting to upstream, client: 192.168.1.1, server: kasten.dummy.com, request: "GET /.well-known/acme-challenge/<challenge-code> HTTP/1.1", upstream: "http://10.1.206.218:8089/.well-known/acme-challenge/<challenge-code>", host: "kasten.dummy.com"


I can access the dashboard on https://kasten.dummy.com/k10/ but the certificate is a ingress dummy certificate.

 

Can anyone help me with that?
Thanks

Best answer by lemassacre

I did set up my own CA now, which is also capable of creating certificates for the ingress resource (step ca). Now it is working.

View original
Did this topic help you find an answer to your question?

  • Comes here often
  • March 15, 2022

I did set up my own CA now, which is also capable of creating certificates for the ingress resource (step ca). Now it is working.


Comment