search

zachomedia / cert-manager-webhook-pdns

A PowerDNS webhook for cert-manager
MIT License
59 stars 35 forks source link

Missing error logging #30

Closed msiebuhr closed 1 year ago

msiebuhr commented 1 year ago

When I have an error in the way I configured the webhook (invalid credentials, wrong upstream URL, ...), no errors how up in my logs:

I0321 12:05:55.414577       1 main.go:129] Presenting challenge: pdns-cert-test-2.default.xxx.one.com => one.com./lb.env.xxx.one.com.
I0321 12:05:55.456905       1 main.go:129] Presenting challenge: pdns-cert-test-2.default.xxx.one.com => one.com./lb.env.xxx.one.com.
I0321 12:05:55.554932       1 main.go:129] Presenting challenge: pdns-cert-test-1.default.xxx.one.com => one.com./lb.env.xxx.one.com.
I0321 12:05:55.590417       1 main.go:129] Presenting challenge: pdns-cert-test-1.default.xxx.one.com => one.com./lb.env.xxx.one.com.

(I ended up hand-adding klog.ErrorS(err, ...) around all the error-sites to find out what happened)

Given I use this Helm-chart (with some modifications to fit our deployment-infrastructure), I'm guessing it's an upstream issue somewhere. But if it's in this code (I don't quite see how, tho), the Helm-chart or the upstream webhook code, I don't know.

msiebuhr commented 1 year ago

After quite a bit of digging with kubectl log ..., it turns out the errors turn up in the cert-manager-webhook-container and not the one actually producing the errors. Feels extremely weird.