Application-gateway-kubernetes-ingress: App GW with Let's Encrypt not working

[samrobillard]

Following the documentation provided in this repo to configure Cert-Manager with App GW and the ingress controller does not create any https listener, backend pool or anything but I see the following in the logs:

I0127 16:30:58.327137 1 mutate_app_gateway.go:154] BEGIN AppGateway deployment
I0127 16:31:18.869181 1 mutate_app_gateway.go:182] Applied App Gateway config in 20.542019492s
I0127 16:31:18.869210 1 mutate_app_gateway.go:198] cache: Updated with latest applied config.
I0127 16:31:18.869975 1 mutate_app_gateway.go:203] END AppGateway deployment

Here's my manifest for the ingress:

apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: ing
annotations:
kubernetes.io/ingress.class: azure/application-gateway
certmanager.k8s.io/cluster-issuer: letsencrypt-staging
spec:
tls:
- hosts:
- somedns.com
secretName: lets-encrypt-secret
rules:
- host: somedns.com
http:
paths:
- backend:
serviceName: svc
servicePort: 80
path: /

Cert-Manager version is 0.13 (latest). It works with a NGINX Ingress controller by the way.

[akshaysngupta]

@samrobillard You should try the following
1) Look at the logs by setting log verbosity to 5.
2) Look at the k8s events by see if you see any event associated to the ingress created by AGIC.

[samrobillard]

@akshaysngupta

This is the error from setting the logging to level 5:

I0128 17:51:18.865058 1 event.go:258] Event(v1.ObjectReference{Kind:"Ingress", Namespace:"default", Name:"some-ingress", UID:"05a05bba-d4c1-428a-8c55-9afe239470dd", APIVersion:"extensions/v1beta1", ResourceVersion:"626540", FieldPath:""}): type: 'Warning' reason: 'SecretNotFound' Unable to find the secret associated to secretId: [default/lets-encrypt-secret]

Thanks for your help on this

[samrobillard]

I figured out the issue. There were some changes in the API version and annotations since version 0.8 that is explained in the documentation. For the ClusterIssuer is now "cert-manager.io/v1alpha2" with the http01 section now being:

solvers:

• http01:
  ingress:
  class: azure/application-gateway

The annotation for the Ingress manifest is now: "cert-manager.io/cluster-issuer:"