Issues with Auto-Renewing mTLS Certificates in Ingress
Asked by
ACK.250ms
Hi everyone! I've configured mTLS for the ingress of my backend service and it's working perfectly. However, I'm running into trouble when it comes time to renew the certificate. My cert-manager tries to auto-renew the certificate, but it fails. I suspect I need to configure something in the cert-manager to allow it to communicate with the backend that requires mTLS. Any insights would be greatly appreciated! Thanks!
Answers
When you mention mTLS enabled in ingress, could you clarify that a bit more? If you're using cert-manager, it can create and manage your own PKI for internal services, which should handle auto-renewals just fine. But it sounds like there's a hiccup in your setup. Have you checked the specific configurations for mTLS?
Reply to this answer
Could you let us know what error you’re getting during the renewal process? That might help diagnose the issue better.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions