How to modify certmanager to let the ingress accept cluster-issuer annotations ? about hasura-k8s-stack HOT 8 CLOSED

Did you run through these steps: https://github.com/hasura/hasura-k8s-stack#cert-manager?

from hasura-k8s-stack.

Yes and it was deployed properly (apart from the certificates, I had to add an exception to firefox to access the hasura console). So I changed

from hasura-k8s-stack.

@shahidhk Thoughts?

from hasura-k8s-stack.

The reason why I did is because I previously successfully deployed other stuff on my cluster like they explain in this article with proper certificates

from hasura-k8s-stack.

ClusterIssuer resource "letsencrypt-prod" not found

I am not familiar with ClusterIssuer, but the included file is of kind Issuer: https://github.com/hasura/hasura-k8s-stack/blob/master/cert-manager/le-prod-issuer.yaml#L2

https://github.com/hasura/hasura-k8s-stack/blob/master/README.md#L212-213
should create the Issuers and https://github.com/hasura/hasura-k8s-stack/blob/master/README.md#L255-266 should issue the actual SSL certs.

I did a Twitch stream on setting this up: https://www.twitch.tv/videos/388115439
Let me know if you have any suggestions. We're always online at https://discord.gg/hasura

from hasura-k8s-stack.

Thank's nervermind. I think I might have a chance with cert-manager helm chart I'll keep you updated of my progress.

from hasura-k8s-stack.

Basically I followed the instructions of cert-manager. Then I made the same changes like I said here :

Yes and it was deployed properly (apart from the certificates, I had to add an exception to firefox to access the hasura console). So I changed

hasura-k8s-stack/cert-manager/le-prod-issuer.yaml

Line 2 in f05e8a9
kind: Issuer
to ClusterIssuer.
And

hasura-k8s-stack/hasura/ingress.yaml

Line 7 in f05e8a9
certmanager.k8s.io/issuer: "letsencrypt-staging"
to certmanager.k8s.io/cluster-issuer: "letsencrypt-prod"

The only things that I did differently (except for certain tools that was updated during the process like webhook in certmanager and nginx controller in mandatory) was to change

to letsencrypt-prod

from hasura-k8s-stack.

EDIT: That's odd I changed back to whatever-app-name-tls and it worked too. I must have done something wrong in the first place

from hasura-k8s-stack.