Describe the bug:
Requesting a certificate from ZeroSSL sometimes takes more than 10 minutes to complete(Challanges ~5min, Order ~3min), unlike Let’s Encrypt which usually takes 20–30 seconds.
During the request process, the logs consistently show the following messages:
"propagation check failed" err="DNS record for \"service.test-1.example.com\" not yet propagated" logger="cert-manager.controller"
And sometimes we got
E0716 13:32:33.439409 1 controller.go:157] "re-queuing item due to error processing" err=<
error creating new order: 504 : <html>
<head><title>504 Gateway Time-out</title></head>
<body>
<center><h1>504 Gateway Time-out</h1></center>
<hr><center>nginx</center>
</body>
</html>
> logger="cert-manager.controller"
and
unexpected non-ACME API error: context deadline exceeded
Expected behaviour:
Reduce the time it takes to obtain certificates from ZeroSSL.
Steps to reproduce the bug:
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: cluster-issuer
namespace: cert-manager
spec:
acme:
server: https://acme.zerossl.com/v2/DV90
externalAccountBinding:
keyID: "keyid"
keySecretRef:
name: zerossl-eab-secret
key: secret
privateKeySecretRef:
name: zerossl-key
solvers:
- dns01:
cloudflare:
apiTokenSecretRef:
key: token
name: cloudflare-token
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: test-cert
namespace: test-1
spec:
secretName: test-cert-1
duration: 2160h0m0s # 90d
renewBefore: 360h0m0s # 15d
issuerRef:
name: cluster-issuer
kind: ClusterIssuer
commonName: "app.env.example.com"
dnsNames:
- "app.env.example.com"
Anything else we need to know?:
Environment details:
- Kubernetes version: 1.30.9
- Cloud-provider/provisioner: Google (GKE)
- cert-manager version: 1.18.2
- Install method: helm
Values
dns01RecursiveNameservers: 1.1.1.1:53,8.8.8.8:53
dns01RecursiveNameserversOnly: true
/kind bug
Describe the bug:
Requesting a certificate from ZeroSSL sometimes takes more than 10 minutes to complete(Challanges ~5min, Order ~3min), unlike Let’s Encrypt which usually takes 20–30 seconds.
During the request process, the logs consistently show the following messages:
And sometimes we got
and
Expected behaviour:
Reduce the time it takes to obtain certificates from ZeroSSL.
Steps to reproduce the bug:
Anything else we need to know?:
Environment details:
Values
/kind bug