Exception: empty collection can't be reduced about kubernetes-letsencrypt HOT 8 CLOSED

But I would like to add that, before this occurred, kubernetes-letsencrypt has been running in production for months without a single hiccup! So thank you for the good work :) 👏

from kubernetes-letsencrypt.

Reasoning about the bug: looks like it happens here, where an empty List<Zone> is being reduced.

Would it be meaningful to just return null if the collection is empty? (I have a very vague idea about how the DNS challenge works, but not details that allow me to easily make sense of the business logic)

from kubernetes-letsencrypt.

Update: as already identified in #72, this error leads to the misbehaviour reported there (too many currently pending authz) - so the two bugs are different but indeed linked.

from kubernetes-letsencrypt.

@f-f Interesting, thanks for looking into it a bit!

The "currently pending authz" issue should've been resolved by the change LE did on their side (i.e. automatically recycling authorisations) which required - according to their announcement - no client-side changes as the service simply returns the existing authorisation.

Did you see that one recently, too?

Would it be meaningful to just return null if the collection is empty?

It'd be the empty Option variant instead of null, but yes!

from kubernetes-letsencrypt.

Did you see that one recently, too?

Yep, this morning I deleted and recreated the controller, and started getting #72.
I just applied the workaround listed there (deleting the letzencrypt-keypair secret), and I started getting this again.

from kubernetes-letsencrypt.

Actually, I think this condition is being triggered by a configuration mistake of us - basically I'm trying to get a certificate for the wrong DNS (however it shouldn't fail this badly, as in the same certificate request I have some domains for which the DNS is correct).

from kubernetes-letsencrypt.

however it shouldn't fail this badly

Agreed! I've put in a PR that will add the relevant check to prevent it from throwing an unnecessary exception here.

from kubernetes-letsencrypt.

Awesome, thank you! 👏

from kubernetes-letsencrypt.