Failing to provision: FAILED_NOT_VISIBLE

[thockin]

Following https://cloud.google.com/kubernetes-engine/docs/how-to/managed-certs

I created an Ingress and 2 certs. I had a bunch of problems, and I don't know the exact sequence, so I'll just write it as a friction log

• Created both certs (I thought, see below)
• Create Ingress referencing them
• Added DNS name -> Ingress
• Ingress is up on HTTP
• HTTPS failing, wait 20 minutes
• HTTPS still failing
• describe ingress shows it is up
• describe managedcertificate shows last event "Create SslCertificate mcrt-..."
• No HTTPS TargetProxy was created (seen in UI)
• Cloud console UI for cert shows: FAILED_NOT_VISIBLE. In fact the k8s resource also shows this. But the domain is up and running.
• Realize I messed up the certs and only applied 1 of the 2
• Now 40 minutes later, the first cert is still provisioning with no events or updates
• Delete both certs and start over - recreate them both
• Still provisioning 20 minutes later
• Still no HTTPS TargetProxy created
• describe ingress shows nothing out of sorts
• Finally after 20 minutes I get FAILED_NOT_VISIBLE again. Still no HTTPS TargetProxy

The DNS resolves properly. Accessing it over HTTP is hitting the correct backend and redirecting to HTTPS.

I am at a loss at this point.

[thockin]

I found a mistake!  I had the wrong cert name (I put the filename, not the object name).  I have updated my ingress now.  And now I see it making progress!

How can we provide more/better information to users?

I was looking for events or status or something, and not finding anything helpful.

[thockin]

And it finally provisioned.

For future readers: make sure your ingress references the right cert name :)