Azure / AKS-Landing-Zone-Accelerator

Official repository for the AKS Landing Zone Accelerator program
MIT License
216 stars 209 forks source link

Create the self-signed certificate using Lets Encrypt [BUG] #24

Closed bspann closed 1 year ago

bspann commented 2 years ago

Describe the bug The Scenario for AKS-Secure-Baseline-PrivateCluster/Bicep/07-workload.md page talks about deploying the Ingress with HTTPS support. When you run the following command:

az aks command invoke --resource-group $ClusterRGName --name $ClusterName --command "kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.8.0/cert-manager.yaml"

you get a message back stating:

command started at 2022-07-01 20:25:59+00:00, finished at 2022-07-01 20:26:03+00:00 with exitcode=1 Unable to connect to the server: EOF

The cert-manager is not installed into the cluster.

To Reproduce Steps to reproduce the behavior:

  1. Connect to a private AKS cluster.
  2. Issue the above command (az aks command invoke --resource-group $ClusterRGName --name $ClusterName --command "kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.8.0/cert-manager.yaml")
  3. Wait until the command comes back to the jumpbox (Bastion)
  4. See error.

Expected behavior cert-manager is installed into the cluster.

Desktop (please complete the following information):

mosabami commented 2 years ago

hey @bspann thanks for your feedback. this issue has now been resolved with #23 . Let me know if you still run into issues.

mosabami commented 1 year ago

closing the issue now @bspann