cert-manager / webhook-example

A cert-manager sample repository for creating an ACME DNS01 solver webhook
Apache License 2.0
108 stars 422 forks source link

How to deal with K8s timelimit in 30s ? #80

Open maffka123 opened 7 hours ago

maffka123 commented 7 hours ago

Hi,

I am relatively new to the topic. As far as I understand certManager contacts custom webhook over Kube API which has timelimit of 30 s? Our custom webhook is designed so that it sends a request to the certbot Service (which is located outside of our responsibility) and than it waits until DNS entry is done, before sending 200 back. This takes much more than 30s and because of this (if I understand correctly) certManager sends like 6 requests one after another, which all are not really answered than properly by our webhook. How can I deal with it? If I send 200 right after sending request to the certBot, than certManager immediately sends cleanUp request. Is there a way to send back some "wait for it and check later" response?