ITADN

Issue reproducing "Securing NGINX-ingress" docs

#1725Closedaugustodsgv 创建于 2025-06-30
A
augustodsgvcommented
Hello. I'm studying how to deploy cert-manager in k8s clusters and I had an issue reproducing the docs [Securing NGINX-ingress](https://github.com/cert-manager/website/issues). I'm new here so let me know if I made a mistake or if it's duplicated issue :) I successfully followed all the steps 1-6 on a brand new cluster until I got stuck on last one [Step 7 - Deploy a TLS Ingress Resource](https://cert-manager.io/docs/tutorials/acme/nginx-ingress/#step-7---deploy-a-tls-ingress-resource), where I've got an error on the challenge, which throws this error: ``` Warning PresentError 2m3s (x7 over 7m8s) cert-manager-challenges Error presenting challenge: admission webhook "validate.nginx.ingress.kubernetes.io" denied the request: ingress contains invalid paths: path /.well-known/acme-challenge/... cannot be used with pathType Exact ``` Here follows the yaml files that I created during the process ``` apiVersion: apps/v1 kind: Deployment metadata: name: kuard spec: selector: matchLabels: app: kuard replicas: 1 template: metadata: labels: app: kuard spec: containers: - image: gcr.io/kuar-demo/kuard-amd64:1 imagePullPolicy: Always name: kuard ports: - containerPort: 8080 ``` ``` apiVersion: v1 kind: Service metadata: name: kuard spec: ports: - port: 80 targetPort: 8080 protocol: TCP selector: app: kuard ``` ``` apiVersion: networking.k8s.io/v1 kind: Ingress metadata: name: kuard annotations: cert-manager.io/issuer: "letsencrypt-staging" spec: ingressClassName: nginx tls: - hosts: - my-cluster.my-domain.com secretName: quickstart-example-tls rules: - host: my-cluster.my-domain.com http: paths: - path: / pathType: Prefix backend: service: name: kuard port: number: 80 ``` ``` apiVersion: cert-manager.io/v1 kind: Issuer metadata: name: letsencrypt-staging spec: acme: server: https://acme-staging-v02.api.letsencrypt.org/directory email: my-email@my-provider.com profile: tlsserver privateKeySecretRef: name: letsencrypt-staging solvers: - http01: ingress: ingressClassName: nginx ``` My cert-manager helm chart is cert-manager-v1.18.0 of app version v1.18.0 My nginx helm chart is ingress-nginx-4.12.3 of app version 1.12.3 Thanks in advance for your help.
关闭于 2025-06-30 11 条评论