Skip to content

Not all treafiks in cluster mode reload acme storage after new certificate is issued #3892

@vladimirtiukhtin

Description

@vladimirtiukhtin

Do you want to request a feature or report a bug?

Bug

What did you do?

I noticed that after certificate is issued not all traefik nodes reload acme storage which means that in some cases web site works in some default traefik certificate is being returned

What did you expect to see?

All traefik nodes acknowledge new certificate

What did you see instead?

Not all traefik node acknowledge new certificate, but some

Output of traefik version:

Version:      v1.6.6
Codename:     tetedemoine
Go version:   go1.10.3
Built:        2018-08-20_01:10:06PM
OS/Arch:      linux/amd64

What is your environment & configuration?

We run traefik in kubernetes using daemonset. This is our args:

        - --defaultentrypoints=http,https
        - --entryPoints=Name:http Address::80 Compress:true
        - --entryPoints=Name:https Address::443 TLS Compress:true
        - --entryPoints=Name:api Address::8080
        - --api
        - --api.dashboard
        - --api.entrypoint=api
        - --api.statistics
        - --etcd
        - --etcd.endpoint=etcd.example.com:2379
        - --etcd.trace
        - --etcd.watch
        - --etcd.useapiv3
        - --etcd.prefix=/traefik
        - --kubernetes
        - --kubernetes.watch
        - --acme
        - --acme.dnschallenge.provider=rfc2136
        - --acme.email=support@asergis.com
        - --acme.storage=/traefik/acme/account
        - --acme.entrypoint=https
        - --acme.acmelogging
        - --acme.dnschallenge
        - --acme.dnschallenge.delaybeforecheck=3
        - --acme.onhostrule
        - --loglevel=INFO
        - --ping
        - --ping.entrypoint=api

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions