Azure-docs: Cannot issue cert successfully

[kyyung]

The SSL cert cannot be issued successfully. I checked the cert-manager log and found the error below:

Failed to finalize order: acme: urn:ietf:params:acme:error:malformed: Order's status ("valid") is not acceptable for finalization

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: ada58160-dc50-b977-d3bc-65f92406e16d
• Version Independent ID: 5c596e04-fddb-effe-3b72-575f4df42d4e
• Content: Configure ingress with Azure Kubernetes Service (AKS) cluster
• Content Source: articles/aks/ingress.md
• Service: container-service
• GitHub Login: @iainfoulds
• Microsoft Alias: iainfou

[SaurabhSharma-MSFT]

@kyyung Thanks for your feedback! We will investigate and update as appropriate.

[mimckitt]

@iainfoulds can you take a look at this one? Seems we have a few comments regarding this specific doc so there might be a larger issue at play

[iainfoulds]

@MicahMcKittrick-MSFT Can you replicate this and provided any additional troubleshooting information, please?

[mimckitt]

@kyyung I can try. I don't have an entire environment setup at the moment so will have to build it out first then will attempt.

[mimckitt]

@kyyung can you try running through the doc again? Myself and others running through this are not seeing issues with issuing the cert. Possibly you missed a step or encounter an transient error.

[neilpeterson]

@kyyung can you paste a copy of the certificate manifest here?

[mimckitt]

@kyyung any update on this?

[iainfoulds]

There were also some updates made to this doc that published this morning. As the initial error appears to be within cert-manager, please verify the example YAML definitions are updated with your own domain names and there's no additional whitespace, for example, and post yours if you still encounter problems.

[jrudley]

These doc's are incorrect. You are creating a staging letsencrypt in your yaml example but output a prod
apiVersion: certmanager.k8s.io/v1alpha1
kind: ClusterIssuer
metadata:
name: letsencrypt-staging
spec:
acme:
server: https://acme-staging-v02.api.letsencrypt.org/directory
email: [email protected]
privateKeySecretRef:
name: letsencrypt-staging
http01: {}

clusterissuer.certmanager.k8s.io/letsencrypt-prod created

[iainfoulds]

@jrudley I'll update the example output. It doesn't effect the steps provided that correctly use letsencrypt-staging.

[jrudley]

Correct, but for people following the tutorial, they may be confused on
what the expected output should be.

On Thu, Jul 19, 2018 at 10:33 AM Iain Foulds [e-mail]
wrote:

@jrudley https://github.com/jrudley I'll update the example output. It
doesn't effect the steps provided that correctly use letsencrypt-staging.

—
You are receiving this because you were mentioned.
Reply to this email directly, view it on GitHub
https://github.com/MicrosoftDocs/azure-docs/issues/11738#issuecomment-406319216,
or mute the thread
https://github.com/notifications/unsubscribe-auth/AB2ES23zbVDKeOIcv0YIQZN68eKN-ldVks5uIKbggaJpZM4VQEdB
.

[iainfoulds]

@jrudley The example output has been updated and should be published live within the hour.

[jrudley]

Thank you for the fast response!

⁣

On Jul 19, 2018, 11:34 AM, at 11:34 AM, Iain Foulds [e-mail] wrote:

@jrudley The example output has been updated and should be published
live within the hour.

--
You are receiving this because you were mentioned.
Reply to this email directly or view it on GitHub:
https://github.com/MicrosoftDocs/azure-docs/issues/11738#issuecomment-406338730