大使边缘堆栈主机未生成ACME证书

Question

我安装了as STACK1.4.2社区版，并添加了主机文件，如下所示。

---
apiVersion: getambassador.io/v2
kind: Host
metadata:
  name: ambassador-host
spec:
  hostname: quote.svc.ambassador.dev.platformer.com
  acmeProvider:
    email: nilesh93.j@gmail.com

这在接下来的阶段就卡住了。

NAME              HOSTNAME                                  STATE   PHASE COMPLETED      PHASE PENDING              AGE
ambassador-host   quote.svc.ambassador.dev.platformer.com   Error   ACMEUserRegistered   ACMECertificateChallenge   48s

这是我的mappings文件，我选择它来运行示例报价服务。

apiVersion: getambassador.io/v2
kind: Mapping
metadata:
  name: quote
  namespace: ambassador
spec:
  prefix: /quote
  service: http://quote.ambassador.svc
  host: quote.svc.ambassador.dev.platformer.com
---
apiVersion: getambassador.io/v2
kind: Mapping
metadata:
  name:  acme-challenge-mapping
  namespace: ambassador
spec:
  rewrite: ""
  prefix: /.well-known/acme-challenge
  service: http://quote.ambassador.svc
  host: quote.svc.ambassador.dev.platformer.com

有什么办法解决这个问题吗？

Answer 1

我和大使也有同样的问题。我已经通过这个命令在kubernetes上安装了cert-manager。

kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v0.15.1/cert-manager.yaml

有关信息，请查看此https://www.getambassador.io/docs/latest/howtos/cert-manager/。您需要为主机创建ClusterIssuer和证书。

注：-“证书管理器将自动创建和续订TLS证书，并将其存储在Kubernetes密钥中，以便在集群中使用。大使将自动监视密钥更改，并在续订时重新加载证书。”

---
apiVersion: getambassador.io/v2
kind: Mapping
metadata:
  name: acme-challenge-mapping
spec:
  prefix: /.well-known/acme-challenge/
  rewrite: ""
  service: acme-challenge-service
---
apiVersion: v1
kind: Service
metadata:
  name: acme-challenge-service
spec:
  ports:
  - port: 80
    targetPort: 8089
  selector:
    acme.cert-manager.io/http01-solver: "true"