Issue reproducing "Securing NGINX-ingress" docs
Hello. I'm studying how to deploy cert-manager in k8s clusters and I had an issue reproducing the docs [Securing NGINX-ingress](https://github.com/cert-manager/website/issues). I'm new here so let me know if I made a mistake or if it's duplicated issue :)
I successfully followed all the steps 1-6 on a brand new cluster until I got stuck on last one [Step 7 - Deploy a TLS Ingress Resource](https://cert-manager.io/docs/tutorials/acme/nginx-ingress/#step-7---deploy-a-tls-ingress-resource), where I've got an error on the challenge, which throws this error:
```
Warning PresentError 2m3s (x7 over 7m8s) cert-manager-challenges Error presenting challenge: admission webhook "validate.nginx.ingress.kubernetes.io" denied the request: ingress contains invalid paths: path /.well-known/acme-challenge/... cannot be used with pathType Exact
```
Here follows the yaml files that I created during the process
```
apiVersion: apps/v1
kind: Deployment
metadata:
name: kuard
spec:
selector:
matchLabels:
app: kuard
replicas: 1
template:
metadata:
labels:
app: kuard
spec:
containers:
- image: gcr.io/kuar-demo/kuard-amd64:1
imagePullPolicy: Always
name: kuard
ports:
- containerPort: 8080
```
```
apiVersion: v1
kind: Service
metadata:
name: kuard
spec:
ports:
- port: 80
targetPort: 8080
protocol: TCP
selector:
app: kuard
```
```
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: kuard
annotations:
cert-manager.io/issuer: "letsencrypt-staging"
spec:
ingressClassName: nginx
tls:
- hosts:
- my-cluster.my-domain.com
secretName: quickstart-example-tls
rules:
- host: my-cluster.my-domain.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: kuard
port:
number: 80
```
```
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
name: letsencrypt-staging
spec:
acme:
server: https://acme-staging-v02.api.letsencrypt.org/directory
email: my-email@my-provider.com
profile: tlsserver
privateKeySecretRef:
name: letsencrypt-staging
solvers:
- http01:
ingress:
ingressClassName: nginx
```
My cert-manager helm chart is cert-manager-v1.18.0 of app version v1.18.0
My nginx helm chart is ingress-nginx-4.12.3 of app version 1.12.3
Thanks in advance for your help.
关闭于 2025-06-30 11 条评论