Comments (5)
Thank you for raising this issue with the AWS Private CA Issuer plugin. We will review your submission and respond back to you here as soon as possible.
from aws-privateca-issuer.
@kuberkaul I am not sure what is incorrect with the setup. This repository is responsible for ensuring a certificate from Private CA is issued correctly. I believe that is done correctly, so I will close this issue. For issues with Istio setup, please reach out to Istio or post an issue there: https://github.com/istio/istio.io/issues. They can best help you correct the setup.
Please feel free to re-open if there is a bug in certificate issuance.
from aws-privateca-issuer.
@kuberkaul Was the certificate issued by the plugin? As long as the certificate was issued, and you can see that the certificate is correct, this is likely an issue with your setup and not a bug in this plugin.
from aws-privateca-issuer.
@divyansh-gupta yes, I can see for both sample apps they are using the cert generated using cert-manager :
2023-01-20T20:29:44.088751Z info SDS socket not found. Starting Istio SDS Server
2023-01-20T20:29:44.088768Z info CA Endpoint cert-manager-istio-csr.cert-manager.svc:443, provider Citadel
2023-01-20T20:29:44.088792Z info Using CA cert-manager-istio-csr.cert-manager.svc:443 cert with certs: var/run/secrets/istio/root-cert.pem
The cert in istio-system are in READY state :
[root@eks-monitor test/vir/build centos]$ kubectl get certificate -n istio-system
NAME READY SECRET AGE
istio-ca True istio-ca 18h
istiod True istiod-tls 18h
The cluster issuer is up :
kubectl get AWSPCAClusterIssuer
NAME AGE
awspcaclusterissuer 4d1h
kubectl get AWSPCAClusterIssuer -o yaml
spec:
arn: arn:aws:acm-pca:us-east-1:xxxx:certificate-authority/fa3412ec-adasas-43aa-8asas0c-4567asas29d4e
region: us-east-1
from aws-privateca-issuer.
@divyansh-gupta do you an issue with the setup ? its a very generic setup that should work in any EKS with cert-manager, istio-csr, aws-privateca-issuer, istio installed. Nothing special about the setup so Im not sure what exactly might not be right here.
from aws-privateca-issuer.
Related Issues (20)
- [Feature Request]: Integration with cert-manager 1.10 HOT 4
- [Bug]: Using the default version causes image pull failures HOT 4
- [Bug]: Image Tag in Helm Chart doesn't match Contianer Image Tag HOT 9
- topologySpreadConstraints support in helm chart HOT 6
- [Bug]: cert-manager.io/cluster-issuer annotation does not work for AWSPCAClusterIssuer HOT 12
- [Feature Request]: helm chart: support optional podDisruptionBudget HOT 1
- [Feature Request]: Documentation of useage with ingress annotations HOT 2
- [Bug]: panic: runtime error: invalid memory address or nil pointer dereference HOT 8
- security HOT 3
- [Feature Request]: Support temporary AWS credentials (including AWS_SESSION_TOKEN) HOT 1
- [Bug]: Error: failed to sts.GetCallerIdentity when using IRSA HOT 11
- [Bug]: awspca-issuer not using secretRef to obtain CA HOT 7
- [Feature Request]: Issue image out of more official ECR Public Repo HOT 2
- [Feature Request]: Support ARM64 architecture HOT 4
- [Feature Request]: Add feature to call kubernetes secrets for the AWSPCAClusterIssuer spec.arn value HOT 3
- [Bug]: Issuer is not ready and certificate creation fails HOT 10
- [Bug]: Connection to AWS PCA not working HOT 5
- [Feature Request]: Replace deprecated `set-output` command with environment file HOT 1
- [Troubleshoot]: Reconciler error StorageError: invalid object, Code: 4 HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aws-privateca-issuer.