Certificate is updated in Azure Key Vault, but ACA Env still references to old version

microsoft / azure-container-apps

Roadmap and issues for Azure Container Apps

MIT License

372 stars 29 forks source link

Certificate is updated in Azure Key Vault, but ACA Env still references to old version #1283

Closed fritzfs closed 2 months ago

fritzfs commented 2 months ago

This issue is a:

[ ] bug report -> please search issues before submitting
[X] documentation issue or request
[ ] regression (a behavior that used to work and stopped in a new release)

Issue description

I am using a custom domain on Azure ContainerApp (ACA) with the combination of Azure Key Vault and Let's Encrypt. Now with keyvault-acmebot I can renew a certificate, but ACA still says the certificate will soon expire and I probably need to click manually update binding.

Screenshots
Screenshot 2024-09-06 at 14 38 14

Screenshot 2024-09-06 at 14 45 03

Screenshot 2024-09-06 at 14 50 13

fritzfs commented 2 months ago

Azure updated it after 4 hours. I missed this part of the documentation where it says it can take up to 12 hours.

https://learn.microsoft.com/en-us/azure/container-apps/key-vault-certificates-manage#rotate-certificates

Screenshot 2024-09-06 at 20 15 56