Skip to content
This repository has been archived by the owner on Apr 23, 2024. It is now read-only.

Ping pong example stops working after certificate renewal #49

Open
wallrj opened this issue Mar 31, 2020 · 0 comments
Open

Ping pong example stops working after certificate renewal #49

wallrj opened this issue Mar 31, 2020 · 0 comments

Comments

@wallrj
Copy link
Member

wallrj commented Mar 31, 2020

In https://github.com/jetstack/cert-manager-nginx-plus-lab#testing-the-deployment-1

If you open the browser and go to https://: it will display the certificate details of the other service that it internally contacted inside the Kubernetes cluster.

I found that the server wasn't responding.
Nor when I try and curl the service from the Ubuntu virtual machine.

It looks like the certificate rotation mechanism might not be working properly:

sysadmin@ubuntu-1804-srv:~$ kubectl get pods
NAME                                         READY   STATUS    RESTARTS   AGE
nginx-workload-deployment-6d6794b959-qjt84   1/1     Running   0          63m
ping-deployment-dfb6c6457-tnlzn              1/1     Running   0          13m
pong-deployment-659c57bc67-9n7pk             1/1     Running   0          13m


sysadmin@ubuntu-1804-srv:~$ kubectl logs ping-deployment-dfb6c6457-tnlzn 
2020/03/31 17:36:03 tls: failed to find any PEM data in certificate input
2020/03/31 17:36:03 tls: failed to find any PEM data in certificate input
2020/03/31 17:37:27 Certificate renewed
2020/03/31 17:37:27 http: Server closed
2020/03/31 17:37:27 http: Server closed


sysadmin@ubuntu-1804-srv:~$ kubectl logs pong-deployment-659c57bc67-9n7pk 
2020/03/31 17:36:03 tls: failed to find any PEM data in certificate input
2020/03/31 17:36:03 tls: failed to find any PEM data in certificate input
2020/03/31 17:37:34 Certificate renewed
2020/03/31 17:37:34 http: Server closed
2020/03/31 17:37:34 http: Server closed

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant