Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ca-download volume prevents harbor-core from starting with LetsEncrypt #840

Open
nayrnet opened this issue Feb 9, 2022 · 2 comments
Open
Assignees
Labels
area/cert-related Issue related to cert kind/enhancement Enhancement or improvement release/1.4

Comments

@nayrnet
Copy link

nayrnet commented Feb 9, 2022

Expected behavior and actual behavior:
When deploying Harbor Operator minimal stack to grab ingress certs from LetsEncrypt the harbor-core deployment fails to mount the ca-download volume and will not deploy.
Warning FailedMount pod/harborcluster-harbor-harbor-core-7586d7d988-9tbx2 MountVolume.SetUp failed for volume "ca-download" : secret "public-certificate" not found

This secret does exist, but the only way to proceed is to edit this deployment and remove this mount.
Screen Shot 2022-02-08 at 5 08 49 PM

Steps to reproduce the problem:
Deploy the minimal_stack_fs.yaml sample, but modify the Certificate of Ingress

    name: <letsencrypt-issuer>
    kind: ClusterIssuer

Deploy the manifest
Ingress is never created
Harbor core is stuck and erroring for failed volume for ca-download mentioned above.
Remove the volume from the deployment
harbor core becomes ready
ingress gets created by harbor-operator.

@sagikazarmark
Copy link
Contributor

Try using the same name for the secret as the certificate name.

@steven-zou steven-zou added kind/enhancement Enhancement or improvement area/cert-related Issue related to cert release/1.4 labels Mar 2, 2022
@bitsf bitsf self-assigned this Jul 19, 2022
@aishwarya-aadi
Copy link

@nayrnet , can u please provide your minimal_stack_fs.yaml file please? i want to implement the same.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/cert-related Issue related to cert kind/enhancement Enhancement or improvement release/1.4
Projects
None yet
Development

No branches or pull requests

5 participants