Skip to content

Instantly share code, notes, and snippets.

@abevoelker
Created April 4, 2018 18:24
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save abevoelker/b4730124eadc3c96a51159947dbefa06 to your computer and use it in GitHub Desktop.
Save abevoelker/b4730124eadc3c96a51159947dbefa06 to your computer and use it in GitHub Desktop.
$ kubectl describe certificate
Name:         captioned-images-tls
Namespace:    default
Labels:       <none>
Annotations:  kubectl.kubernetes.io/last-applied-configuration={"apiVersion":"certmanager.k8s.io/v1alpha1","kind":"Certificate","metadata":{"annotations":{},"name":"captioned-images-tls","namespace":"default"},"spe...
API Version:  certmanager.k8s.io/v1alpha1
Kind:         Certificate
Metadata:
  Cluster Name:        
  Creation Timestamp:  2018-04-04T17:48:55Z
  Generation:          0
  Initializers:        <nil>
  Resource Version:    1676767
  Self Link:           /apis/certmanager.k8s.io/v1alpha1/namespaces/default/certificates/captioned-images-tls
  UID:                 71981d77-3830-11e8-800e-42010a80007d
Spec:
  Acme:
    Config:
      Domains:
        captioned-images.abevoelker.com
        assets-captioned-images.abevoelker.com
      Http 01:
        Ingress:        
        Ingress Class:  nginx
  Common Name:          captioned-images.abevoelker.com
  Dns Names:
    captioned-images.abevoelker.com
    assets-captioned-images.abevoelker.com
  Issuer Ref:
    Kind:       ClusterIssuer
    Name:       letsencrypt-prod
  Secret Name:  captioned-images-tls
Status:
  Acme:
    Authorizations:  <nil>
  Conditions:
    Last Transition Time:  2018-04-04T18:09:23Z
    Message:               Error checking ACME domain validation: [error waiting for key to be available for domain "captioned-images.abevoelker.com": context deadline exceeded, error waiting for key to be available for domain "assets-captioned-images.abevoelker.com": context deadline exceeded]
    Reason:                ErrCheckAuthorization
    Status:                False
    Type:                  Ready
Events:
  Type     Reason                   Age               From                     Message
  ----     ------                   ----              ----                     -------
  Warning  ErrorCheckCertificate    9m (x2 over 24m)  cert-manager-controller  Error checking existing TLS certificate: secret "captioned-images-tls" not found
  Normal   PrepareCertificate       9m (x2 over 24m)  cert-manager-controller  Preparing certificate with issuer
  Normal   PresentChallenge         9m (x2 over 24m)  cert-manager-controller  Presenting http-01 challenge for domain assets-captioned-images.abevoelker.com
  Normal   PresentChallenge         9m (x2 over 24m)  cert-manager-controller  Presenting http-01 challenge for domain captioned-images.abevoelker.com
  Normal   SelfCheck                9m (x2 over 24m)  cert-manager-controller  Performing self-check for domain assets-captioned-images.abevoelker.com
  Normal   SelfCheck                9m (x2 over 24m)  cert-manager-controller  Performing self-check for domain captioned-images.abevoelker.com
  Warning  ErrorPrepareCertificate  9m                cert-manager-controller  Error preparing issuer for certificate: [error waiting for key to be available for domain "captioned-images.abevoelker.com": context deadline exceeded, error waiting for key to be available for domain "assets-captioned-images.abevoelker.com": context deadline exceeded]
$ kubectl describe ing
Name:             captioned-images-ipv4-ingress
Namespace:        default
Address:          130.211.47.102
Default backend:  default-http-backend:80 (10.48.0.3:8080)
Rules:
  Host                                    Path  Backends
  ----                                    ----  --------
  captioned-images.abevoelker.com         
                                             captioned-images-web:80 (<none>)
  assets-captioned-images.abevoelker.com  
                                             captioned-images-assets:80 (<none>)
Annotations:
  backends:         {"k8s-be-31468--4f88d9d22add978a":"HEALTHY","k8s-be-31477--4f88d9d22add978a":"HEALTHY","k8s-be-31534--4f88d9d22add978a":"HEALTHY"}
  forwarding-rule:  k8s-fw-default-captioned-images-ipv4-ingress--4f88d9d22add978a
  target-proxy:     k8s-tp-default-captioned-images-ipv4-ingress--4f88d9d22add978a
  url-map:          k8s-um-default-captioned-images-ipv4-ingress--4f88d9d22add978a
Events:
  Type     Reason   Age                 From                     Message
  ----     ------   ----                ----                     -------
  Warning  Service  54m                 loadbalancer-controller  Could not find nodeport for backend {ServiceName:cm-captioned-images-tls-kkwpz ServicePort:{Type:0 IntVal:8089 StrVal:}}: service default/cm-caption
ed-images-tls-kkwpz not found in store
  Warning  Service  45m                 loadbalancer-controller  Could not find nodeport for backend {ServiceName:cm-captioned-images-tls-rwdop ServicePort:{Type:0 IntVal:8089 StrVal:}}: service default/cm-caption
ed-images-tls-rwdop not found in store
  Normal   Service  5m (x1316 over 8d)  loadbalancer-controller  no user specified default backend, using system default


  Name:             captioned-images-ipv6-ingress
  Namespace:        default
  Address:          2600:1901:0:fd6a::
  Default backend:  default-http-backend:80 (10.48.0.3:8080)
  Rules:
    Host                                    Path  Backends
    ----                                    ----  --------
    captioned-images.abevoelker.com         
                                               captioned-images-web:80 (<none>)
    assets-captioned-images.abevoelker.com  
                                               captioned-images-assets:80 (<none>)
  Annotations:
    backends:         {"k8s-be-31468--4f88d9d22add978a":"HEALTHY","k8s-be-31477--4f88d9d22add978a":"HEALTHY","k8s-be-31534--4f88d9d22add978a":"HEALTHY"}
    forwarding-rule:  k8s-fw-default-captioned-images-ipv6-ingress--4f88d9d22add978a
    target-proxy:     k8s-tp-default-captioned-images-ipv6-ingress--4f88d9d22add978a
    url-map:          k8s-um-default-captioned-images-ipv6-ingress--4f88d9d22add978a
  Events:
    Type    Reason   Age                 From                     Message
    ----    ------   ----                ----                     -------
    Normal  Service  5m (x1296 over 8d)  loadbalancer-controller  no user specified default backend, using system default


  Name:             cm-captioned-images-tls-lonef
  Namespace:        default
  Address:          
  Default backend:  default-http-backend:80 (10.48.0.3:8080)
  Rules:
    Host                             Path  Backends
    ----                             ----  --------
    captioned-images.abevoelker.com  
                                     /.well-known/acme-challenge/nbuLJVlQzFInwUuGpAmegFBmcm4qpQmpOXOrjn1Mu5I   cm-captioned-images-tls-czlge:8089 (<none>)
  Annotations:
  Events:  <none>


  Name:             cm-captioned-images-tls-sqgla
  Namespace:        default
  Address:          
  Default backend:  default-http-backend:80 (10.48.0.3:8080)
  Rules:
    Host                                    Path  Backends
    ----                                    ----  --------
    assets-captioned-images.abevoelker.com  
                                            /.well-known/acme-challenge/mUpB7z2PKQdNmVBZ0U54_utcx8FfU01v-W0zhsdDvsc   cm-captioned-images-tls-znykq:8089 (<none>)
  Annotations:
  Events:  <none>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment