-
Notifications
You must be signed in to change notification settings - Fork 2.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Azure DNS ACME Solver Issue #4480
Comments
Issues go stale after 90d of inactivity. |
Kindly try with principal ID instead of clientID |
Stale issues rot after 30d of inactivity. |
Rotten issues close after 30d of inactivity. |
1 similar comment
Rotten issues close after 30d of inactivity. |
@jetstack-bot: Closing this issue. In response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
Describe the bug:
I am trying to use the ACME DNS01 Solver as part of my ClusterIssuer. My AKS cluster is setup with managedIdentities and the managed identity has the proper role permissions (verified by SysAdmin). When I create the certificate object, the challenge gives me a status of
cert-manager Error presenting challenge: error instantiating azuredns challenge solver: ClientID is not set but neither
--cluster-issuer-ambient-credentials
nor--issuer-ambient-credentials
are set. These are necessary to enable Azure Managed IdentitiesSo even though the default in the code for cluster-issuer-ambient-crednetials is true I set it the flag in the cert-manager deployment just to verify. But obviously when cert-manager gets to that part of the code it is false still so either it is not getting passed in correctly or more likely I am missing something in my setup. This is my only issuer in the cluster so it cannot be using a different issuer.
Steps to reproduce the bug:
Anything else we need to know?:
I did try to upgrade to the v1.6-alpha and use the managedIdentity field to see if that was the problem but I get the same exact error.
Environment details::
/kind bug
The text was updated successfully, but these errors were encountered: