Comments (8)
Turns out that this is resolvable by doing below:
apiVersion: extensions/v1beta1
# apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
annotations:
cert-manager.io/issuer: myprivate-ca
cert-manager.io/issuer-kind: AWSPCAClusterIssuer
cert-manager.io/issuer-group: awspca.cert-manager.io
cert-manager.io/common-name: podinfo.infrastructure.com
name: podinfo
namespace: podinfo
spec:
rules:
- host: podinfo.infrastructure.com
http:
paths:
- path: /
backend:
serviceName: podinfo
servicePort: 80
tls:
- hosts:
- podinfo.infrastructure.com
secretName: podinfo10
Main change being adding the extra annotation cert-manager.io/common-name: podinfo.infrastructure.com
Happy for this to be closed perhaps with an example of generating cert this way.
from aws-privateca-issuer.
Just ran into the same issue and adding the cert-manager.io/common-name
annotation fixed it. Thanks!
from aws-privateca-issuer.
Hi,
I haven't actually tested this before. Can you post both of the CertificateRequest CRs that are created?
I can probably check why it's not working from there.
from aws-privateca-issuer.
Not sure I know exactly what to post whilst keeping sensitive information off. It is easy to test it as documented here https://cert-manager.io/docs/usage/ingress/#how-it-works
from aws-privateca-issuer.
I'll have to try and reproduce it later this week then.
from aws-privateca-issuer.
@jniebuhr - any chance you got round to looking at this?
from aws-privateca-issuer.
Thanks for the update.
from aws-privateca-issuer.
I noticed that I need to add a commonName
to the Certificate
for it to avoid the CSR error
The cert-manager docs show that the commonName
is deprecated so initially I didn't use it.
https://cert-manager.io/docs/usage/certificate/
# The use of the common name field has been deprecated since 2000 and is
# discouraged from being used.
commonName: example.com
In teleport 9.x, you have to set .Values.highAvailability.certManager.addCommonName = true
since it's false by default
And set the following usages
in certificate.yaml
usages:
- server auth
- client auth
from aws-privateca-issuer.
Related Issues (20)
- [Feature Request]: Integration with cert-manager 1.10 HOT 4
- [Bug]: Using the default version causes image pull failures HOT 4
- Integration with cert-manager, istio-csr fails pod to pod mTLS. HOT 5
- [Bug]: Image Tag in Helm Chart doesn't match Contianer Image Tag HOT 9
- topologySpreadConstraints support in helm chart HOT 6
- [Bug]: cert-manager.io/cluster-issuer annotation does not work for AWSPCAClusterIssuer HOT 12
- [Feature Request]: helm chart: support optional podDisruptionBudget HOT 1
- [Feature Request]: Documentation of useage with ingress annotations HOT 2
- [Bug]: panic: runtime error: invalid memory address or nil pointer dereference HOT 8
- security HOT 3
- [Feature Request]: Support temporary AWS credentials (including AWS_SESSION_TOKEN) HOT 1
- [Bug]: Error: failed to sts.GetCallerIdentity when using IRSA HOT 11
- [Bug]: awspca-issuer not using secretRef to obtain CA HOT 7
- [Feature Request]: Issue image out of more official ECR Public Repo HOT 2
- [Feature Request]: Support ARM64 architecture HOT 4
- [Feature Request]: Add feature to call kubernetes secrets for the AWSPCAClusterIssuer spec.arn value HOT 3
- [Bug]: Issuer is not ready and certificate creation fails HOT 10
- [Bug]: Connection to AWS PCA not working HOT 5
- [Feature Request]: Replace deprecated `set-output` command with environment file HOT 1
- [Troubleshoot]: Reconciler error StorageError: invalid object, Code: 4 HOT 8
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from aws-privateca-issuer.