tnozicka / openshift-acme

ACME Controller for OpenShift and Kubernetes Cluster. (Supports e.g. Let's Encrypt)
Apache License 2.0
319 stars 116 forks source link

Route needs new certificate: Route is missing CertKey #171

Open rsnarasimha opened 2 years ago

rsnarasimha commented 2 years ago

Hello,

I am trying to deploy openshift acme to my namespace "einvoiz" in Openshift Online Pro (pro-us-east-1.openshift.com). While I do not have cluster role access, I am trying to deploy with the single namespace option. I am encountering the error -


I0505 16:54:35.341430 1 route.go:496] Started syncing Route "einvoiz/my-einvoiz" I0505 16:54:35.341485 1 route.go:563] Route "einvoiz/my-einvoiz" needs new certificate: Route is missing CertKey I0505 16:54:35.341708 1 route.go:607] Using ACME client with DirectoryURL "https://acme-v02.api.letsencrypt.org/directory " I0505 16:54:35.945718 1 route.go:622] Created Order "https://acme-v02.api.letsencrypt.org/acme/order/530107516/86062335446 " for Route "einvoiz/my-einvoiz" I0505 16:54:35.946058 1 route.go:482] Updating status for Route einvoiz/my-einvoiz to (api.Status){ObservedGeneration:(int64)0 CertificateMeta:(api.CertificateMeta) ProvisioningStatus:(api.CertProvisioningStatus){StartedAt:(time.Time)2022-05-05 16:54:35.94574829 +0000 UTC m=+3298.821545655 EarliestAttemptAt:(time.Time)0001-01-01 00:00:00 +0000 UTC Failures:(int)0 OrderURI:(string)https://acme-v02.api.letsencrypt.org/acme/order/530107516/86062335446 OrderStatus:(string)pending OrderError:(*api.OrderError) AccountHash:(string)} Signature:(string)} I0505 16:54:35.956203 1 route.go:498] Finished syncing Route "einvoiz/my-einvoiz" I0505 16:54:35.956361 1 route.go:226] Updating Route einvoiz/my-einvoiz RV=1947228483->1947228493 UID=69b6cfd0-cc88-11ec-b7d5-125b034d2f46->69b6cfd0-cc88-11ec-b7d5-125b034d2f46 I0505 16:54:35.956440 1 route.go:496] Started syncing Route "einvoiz/my-einvoiz" I0505 16:54:35.956569 1 route.go:563] Route "einvoiz/my-einvoiz" needs new certificate: Route is missing CertKey I0505 16:54:35.956755 1 route.go:607] Using ACME client with DirectoryURL "https://acme-v02.api.letsencrypt.org/directory " I0505 16:54:36.302889 1 route.go:650] Route "einvoiz/my-einvoiz": Order "https://acme-v02.api.letsencrypt.org/acme/order/530107516/86062335446 " is in "pending" state I0505 16:54:36.302945 1 route.go:655] Route "einvoiz/my-einvoiz": Order "https://acme-v02.api.letsencrypt.org/acme/order/530107516/86062335446 " contains 1 authorization(s) I0505 16:54:36.401187 1 route.go:663] Route "einvoiz/my-einvoiz": order "https://acme-v02.api.letsencrypt.org/acme/order/530107516/86062335446": authz "https://acme-v02.api.letsencrypt.org/acme/authz-v3/105431156956": is in "pending" state I0505 16:54:36.401232 1 route.go:690] route "einvoiz/my-einvoiz": order "https://acme-v02.api.letsencrypt.org/acme/order/530107516/86062335446": authz "https://acme-v02.api.letsencrypt.org/acme/authz-v3/105431156956": challenge "pending" is in "pending" state

The openshift acme version 1 was deployed and working correctly. This problem has occurred since migrating to version 2 Openshift ACME Logs.docx .