not-ready

cert-manager.log

I1106 21:51:54.029492       1 start.go:63] starting cert-manager v0.4.1 (revision ad30555d3aebaafa1524272a44ba80ffcdc01d2f)
I1106 21:51:54.031025       1 controller.go:111] Using the following nameservers for DNS01 checks: [10.31.240.10:53]
I1106 21:51:54.031734       1 server.go:68] Listening on http://0.0.0.0:9402
I1106 21:51:54.032235       1 leaderelection.go:175] attempting to acquire leader lease  prod-inf/cert-manager-controller...
I1106 21:52:09.671979       1 leaderelection.go:184] successfully acquired lease prod-inf/cert-manager-controller
I1106 21:52:09.673358       1 controller.go:53] Starting certificates controller
I1106 21:52:09.673485       1 controller.go:53] Starting clusterissuers controller
I1106 21:52:09.673645       1 controller.go:53] Starting ingress-shim controller
I1106 21:52:09.674307       1 controller.go:53] Starting issuers controller
I1106 21:52:09.784039       1 controller.go:138] clusterissuers controller: syncing item 'letsencrypt-staging'
I1106 21:52:09.784385       1 helpers.go:134] Setting lastTransitionTime for ClusterIssuer "letsencrypt-staging" condition "Ready" to 2018-11-06 21:52:09.784377161 +0000 UTC m=+15.765035747
I1106 21:52:09.790969       1 controller.go:152] clusterissuers controller: Finished processing work item "letsencrypt-staging"
I1106 21:52:09.801326       1 controller.go:138] clusterissuers controller: syncing item 'letsencrypt-staging'
I1106 21:52:09.801698       1 controller.go:152] clusterissuers controller: Finished processing work item "letsencrypt-staging"
I1106 21:52:33.564429       1 controller.go:181] certificates controller: syncing item 'prod-app/crt-wildcard'
I1106 21:52:33.564493       1 sync.go:89] Issuer letsencrypt-staging not ready
E1106 21:52:33.564661       1 controller.go:190] certificates controller: Re-queuing item "prod-app/crt-wildcard" due to error processing: Issuer letsencrypt-staging not ready
I1106 21:52:37.565086       1 controller.go:181] certificates controller: syncing item 'prod-app/crt-wildcard'
I1106 21:52:37.565183       1 sync.go:89] Issuer letsencrypt-staging not ready
E1106 21:52:37.565251       1 controller.go:190] certificates controller: Re-queuing item "prod-app/crt-wildcard" due to error processing: Issuer letsencrypt-staging not ready
I1106 21:52:45.565502       1 controller.go:181] certificates controller: syncing item 'prod-app/crt-wildcard'
I1106 21:52:45.565616       1 sync.go:89] Issuer letsencrypt-staging not ready
E1106 21:52:45.565677       1 controller.go:190] certificates controller: Re-queuing item "prod-app/crt-wildcard" due to error processing: Issuer letsencrypt-staging not ready
I1106 21:53:01.566034       1 controller.go:181] certificates controller: syncing item 'prod-app/crt-wildcard'
I1106 21:53:01.566288       1 sync.go:89] Issuer letsencrypt-staging not ready
E1106 21:53:01.566392       1 controller.go:190] certificates controller: Re-queuing item "prod-app/crt-wildcard" due to error processing: Issuer letsencrypt-staging not ready
I1106 21:53:33.566751       1 controller.go:181] certificates controller: syncing item 'prod-app/crt-wildcard'
I1106 21:53:33.566825       1 sync.go:89] Issuer letsencrypt-staging not ready
E1106 21:53:33.566870       1 controller.go:190] certificates controller: Re-queuing item "prod-app/crt-wildcard" due to error processing: Issuer letsencrypt-staging not ready

cert.yml

#  cert-manager.crtWildcard
---
apiVersion: certmanager.k8s.io/v1alpha1
kind: Certificate
metadata:
  labels:
    ksonnet.io/component: cert-manager.crtWildcard
  name: crt-wildcard
  namespace: prod-app
spec:
  acme:
    config:
    - dns01:
        provider: prod-dns
      domains:
      - '*.mydomain.com'
      - mydomain.com
  commonName: '*.mydomain.com'
  dnsNames:
  - mydomain.com
  issuerRef:
    kind: ClusterIssuer
    name: letsencrypt-staging
  secretName: crt-wildcard

clusterIssuer.yml

---
apiVersion: certmanager.k8s.io/v1alpha1
kind: ClusterIssuer
metadata:
  labels:
    ksonnet.io/component: cert-manager.clusterIssuer
  name: letsencrypt-staging
spec:
  acme:
    dns01:
      providers:
      - clouddns:
          serviceAccountSecretRef:
            key: certmanager-dns-sa.json
            name: certmanager-dns-sa
        name: prod-dns
        project: mydomain
    email: admin@mydomain.com
    privateKeySecretRef:
      name: letsencrypt-staging
    server: https://acme-staging-v02.api.letsencrypt.org/directory