debugging clusterissuer

example-deployment.yaml

@@ -1,21 +1,3 @@
-apiVersion: cert-manager.io/v1
-kind: Issuer
-metadata:
-  name: letsencrypt-prod
-spec:
-  acme:
-    # The ACME server URL
-    server: https://acme-v02.api.letsencrypt.org/directory
-    # Email address used for ACME registration
-    email: certs@yolokube.de
-    # Name of a secret used to store the ACME account private key
-    privateKeySecretRef:
-      name: letsencrypt-prod
-    # Enable the HTTP-01 challenge provider
-    solvers:
-    - http01:
-        ingress:
-          class: nginx
 ---
 apiVersion: apps/v1
 kind: Deployment

letsencrypt.yaml

@@ -5429,6 +5429,7 @@ webhooks:
         namespace: cert-manager
         path: /validate
 #########################################
+---
 apiVersion: cert-manager.io/v1
 kind: ClusterIssuer
 metadata:
@@ -5447,4 +5448,23 @@ spec:
     solvers:
     - http01:
         ingress:
-          class: nginx
+          class: nginx
+---
+apiVersion: cert-manager.io/v1
+kind: ClusterIssuer
+metadata:
+ name: letsencrypt-staging
+spec:
+  acme:
+    # The ACME server URL
+    server: https://acme-staging-v02.api.letsencrypt.org/directory
+    # Email address used for ACME registration
+    email: certs@yolokube.de
+    # Name of a secret used to store the ACME account private key
+    privateKeySecretRef:
+     name: letsencrypt-staging
+    # Enable the HTTP-01 challenge provider
+    solvers:
+    - http01:
+       ingress:
+         class:  nginx

test-ingress.yaml

@@ -37,8 +37,10 @@ apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata:
   name: helloworld-ingress
+  annotations:
+    kubernetes.io/ingress.class: nginx
+    cert-manager.io/cluster-issuer: letsencrypt-staging
 spec:
-  ingressClassName: nginx
   rules:
   - host: "lb1.yolokube.de"
     http:
@@ -49,4 +51,8 @@ spec:
           service:
             name: helloworld-service
             port:
-              number: 80
+              number: 80
+  tls:
+  - hosts:
+    - lb1.yolokube.de
+    secretName: helloworld-cert