Kubernetes / Rancher Troubleshooting TLS Certificates.

Debugging von TLS-Zertifikaten in Rancher und Kubernetes: kubectl-Befehle für Ingress, ClusterIssuer und Certificates.

Dr. Viktor Walter-Tscharf1 MIN. LESEZEIT
Kubernetes / Rancher Troubleshooting TLS Certificates.

Rancher and SSL Certificates debugging.

Trouble shooting[*frontends can be replaces with the namespace]:

$ kubectl get ingress -n frontends

$ kubectl get clusterissuers

$ kubectl get certificates

$ kubectl get certificate -n frontends

$ kubectl describe certificate -n frontends

$ kubectl get orders -n frontends

$ kubectl get challenges -n frontends

use the codes to debug your Cluster issuer and look out for errors. This is how I found a issuing problem with on of my certificates.

I found the Problem: “The certificate request has failed to complete and will be retried: Failed to wait for order resource “ingress-cert-4xz5r-3725247702” to become ready: order is in “invalid” state:

I hope it helped. Happy coding.