Comments (10)
I found a solution by the way :D It was announced on TrueCharts Discrod 7.11.2023.
Cert-Manager update issues
Users having problems with updating cert-manager from the operators train will have to run:
k3s kubectl delete --grace-period 30 --v=4 -k https://github.com/truecharts/manifests/delete4
Then try the update again
Do an edit of cluster-issuer without any changes and save...In edgecases where this does not work correctly, please follow the instructions below at your own risk
Find out if there are anycrd
objects left by runningk3s kubectl get crd -A | grep "cert-manager"
Run the following, replacing "REPLACE" with the name of the object identified with the command above:
k3s kubectl delete crd REPLACE
(Note, if stuck for a minute or two, just hit ctrl+c and continue)
k3s kubectl patch crd/REPLACE -p '{"metadata":{"finalizers":[]}}' --type=merge
For me after first suggested command to run, cert-manager updated correctly to latest version. Cheers!
from cert-manager.
Darn. Now's a bad time to mention that I just filed the ticket.
Though it's still something that'd be handy for them to fix.
from cert-manager.
I'm pretty sure that this error has nothing to do with cert-manager itself. Its rather related with cert-manager definition created by TrueCharts for TrueNAS environment. Better file a ticket here: https://github.com/truecharts/charts/issues.
Anyways, i'm also getting the same error and still looking for solution ;)
from cert-manager.
Cheers. I'll go and close this and refile a fresh ticket over there.
I'll add in a link for you to the new one before I close this tho.
from cert-manager.
Just for my own reference, since I really don't know how to do much when it comes to the non-gui side, minus your general navigation of a Linux file system, how would I go about doing this fix?
from cert-manager.
On Your TrueNAS Scale go to System Settings > Shell. There You can run commands mentioned above.
from cert-manager.
I had tried that initially, given it's a copy-paste solution, although it threw up this error:
WARN[0000] Unable to read /etc/rancher/k3s/k3s.yaml, please start server with --write-kubeconfig-mode to modify kube config permissions error: error loading config file "/etc/rancher/k3s/k3s.yaml": open /etc/rancher/k3s/k3s.yaml: permission denied
Unless I need to login as root-
from cert-manager.
Indeed You have to login as root.
from cert-manager.
Yep, cool, got that sorted.
Glad to see that the 'Updates available' tag is gone now. Holy crap.
from cert-manager.
Good to hear that. Besides that i'm not a discord-guy and i'm not using it on my daily basis, i encourge You to join their Discord here https://truecharts.org/s/discord. A lot of issues has a solution there which are not available elsewhere.
from cert-manager.
Related Issues (20)
- cert-manager/certificates-issuing: re-queuing item due to optimistic locking on resource" HOT 1
- Certificate spec.ipAddresses throws unsupportedIdentifier on cert NewOrder HOT 2
- Invalid certificate error on helm release after failed helm release HOT 3
- Only a few cert-manager metrics are available HOT 1
- error instantiating route53 challenge solver: unable to assume role: AccessDenied: User: arn:aws:sts::xxxxx:assumed-role/cert-manager/xxxx is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::9xxxxx:role/cert-manager HOT 5
- cert-manager-startupapicheck fails with certificate signed by unknown authority HOT 1
- DNS-01: "propagation check failed" err="NS ns-0.awsdns-00.com.:53 returned REFUSED for _acme-challenge.stage-keycloak.xxxx.com." logger="cert-manager.challenges" resource_name="stage-keycloak.xxxx-1647614373" resource_namespace="keycloak" resource_kind="Challenge" resource_version="v1" dnsName="stage-keycloak.xxxx.xxxx.com"
- Possibility to provide full chain with self-issuer CA HOT 1
- The order remains in the invalid state HOT 1
- Clean installation of cert-manager v1.14.4 on k3s v1.29.2+k3s1 gives error: resource mapping not found for ClusterIssuer HOT 4
- configure cert-manager ClusterIssuer/Issuer in k8s cluster with CA certificate stored in Azure Key Vault
- How About Graduating the Gateway API Support to GA? HOT 4
- Akamai Edge DNS - Support for "Account Switch Key" in DNS01 Solver
- Not able to generate .p12 certificates by cert-manager HOT 1
- Helm chart support dual stuck clusters
- Allow client-side rate-limiting to be disabled
- Does cert-manager support issuers from paid certificate authorities? HOT 1
- Not able to set the default ingressClassName when user creates issuer using class tag. HOT 5
- Venafi Certificate Valid Date
- Adding custom annotation to cm ingress resources HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cert-manager.