too many certificates already issued for: nip.io: see https://letsencrypt.org/docs/rate-limits/ about aksworkshop HOT 6 CLOSED

I got the above error then i deleted the cert "frontend-tls-secret" and recreated again and configured the cert with out an issue. I configured cert for the back end service "captureorder-tls-secret" and got the following error "http-01 self check failed for domain "captureorder...."

Name: captureorder-tls-secret
Namespace: default
Labels:
Annotations:
API Version: certmanager.k8s.io/v1alpha1
Kind: Certificate
Metadata:
Creation Timestamp: 2019-10-17T16:26:55Z
Generation: 106
Owner References:
API Version: extensions/v1beta1
Block Owner Deletion: true
Controller: true
Kind: Ingress
Name: captureorder
UID: 89a33321-fa39-46e5-8875-97e604aefc1e
Resource Version: 111930
Self Link: /apis/certmanager.k8s.io/v1alpha1/namespaces/default/certificates/captureorder-tls-secret
UID: 6d61b41e-b41f-46d8-b7f4-92b0fdda916c
Spec:
Acme:
Config:
Domains:
captureorder.40.119.5.244.nip.io
http01:
Ingress:
Dns Names:
captureorder.40.119.5.244.nip.io
Issuer Ref:
Kind: ClusterIssuer
Name: letsencrypt
Secret Name: captureorder-tls-secret
Status:
Acme:
Order:
Challenges:
Authz URL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/820602804
Domain: captureorder.40.119.5.244.nip.io
http01:
Ingress:
Key: GoSk5MI7sj2ptVtNW6TJgUtlVq_pO3xzkgndl4kixL8.sXSfY3PJyw1vnuPMvmnewk3MO_ESAHfO4cWnQN771Kw
Token: GoSk5MI7sj2ptVtNW6TJgUtlVq_pO3xzkgndl4kixL8
Type: http-01
URL: https://acme-v02.api.letsencrypt.org/acme/chall-v3/820602804/3o3p5Q
Wildcard: false
URL: https://acme-v02.api.letsencrypt.org/acme/order/69597009/1305789186
Conditions:
Last Transition Time: 2019-10-17T18:12:42Z
Message: http-01 self check failed for domain "captureorder.40.119.5.244.nip.io"
Reason: ValidateError
Status: False
Type: Ready
Events:

Here is the metadata for captureorder-ingress-tls.yaml

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: captureorder
annotations:
certmanager.k8s.io/cluster-issuer: letsencrypt
spec:
tls:

• hosts:
  • captureorder.40.119.5.244.nip.io
    secretName: captureorder-tls-secret
    rules:
• host: captureorder.40.119.5.244.nip.io
  http:
  paths:
  • backend:
    serviceName: captureorder
    servicePort: 80
    path: /

from aksworkshop.

Unfortunately, we run into this every once in a while. Let's Encrypt issues a limited number of certificates for each domain and once this runs out, we have to wait again.
The workaround would be to use your own domain.

from aksworkshop.

How much time you had to wait - I guess they issue a new 50 certificate next week if following week was the one that had expired certs? Can you confirm ?

from aksworkshop.

Try to work around this by using a dashed IP in the domain, for example, 12-34-222-77.nio.io

from aksworkshop.

How does it matter to use - dash in the subdomains. For example I have abc.xyz as parent domain and I have subdomains foo.abc.xyz and bar.abc.xyz so in any case if I am not allowed to get any more certs for abc.xyz then there is no other way just to wait for next limits correct ?

from aksworkshop.

from aksworkshop.