pebble icon indicating copy to clipboard operation
pebble copied to clipboard

Published 20 hours ago • verified publisher icon letsencrypt

New Certificates aren't getting Ready

Open NoamGaloz1 opened this issue 3 months ago • 0 comments

After every restart of Pebble pod (from any reason) -

  • New certificates aren't getting Ready, stuck with error : ''Failed to create Order: 400 urn:ietf:params:acme:error:malformed: Key ID(kid) in JWS header missing expected URL prefix''.
  • Only after deletion and re-creation of Pebble's cluster issuer, new certificates are getting ready.

It's like something in the restarting of pebble's pod is breaking the synchronization between pebble cluster issuer and the cert-manager (https://github.com/cert-manager/cert-manager) which we are using to send the certificate requests to the Certificate Authorities.

NoamGaloz1 avatar Apr 04 '24 06:04 NoamGaloz1