search

bitpoke / stack

Open-Source WordPress Infrastructure on Kubernetes
https://www.bitpoke.io/stack
Apache License 2.0
162 stars 31 forks source link

How to configure cert-manager to generate valid certificates? #93

Open engmsaleh opened 4 years ago

engmsaleh commented 4 years ago

What happened: When I deploy my website to stack with SSL and LetsEncypt support and visit the website in any browser I got the "cert-manager" certificate isn't trusted by browsers, hence the browsers don't recognize the website as trusted on and hence not HTTPs

What you expected to happen: It should make a certificate and SSL should work correctly

How to reproduce it (as minimally and precisely as possible): Deploy stack with SSL support and try to check if the cert-manger certificate is trusted

Anything else?: No Screen Shot 2020-05-24 at 1 41 15 AM

AMecea commented 4 years ago

Hi @engmsaleh, This is because the certificate is not issued by Let's Encrypt but by the default issues. You have to configure Stack to uses Let's Encrypt. Using helm just upgrade the release using the following command or by setting those in your values.yaml file.

helm upgrade stack presslabs/stack --reuse-values --set letsencrypt.enabled=true --set letsencrypt.email=your@email.here
waigel commented 3 years ago

I also have a problem with the certificates. Unfortunately I only get a cert with cn=Kubernetes Ingress Controller Fake Certificate. Do I need to configure the ingress controller additionally?