Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Try to fix proxy-protocol and http01 challenge #38

Closed
splattner opened this issue Jan 27, 2023 · 1 comment
Closed

Try to fix proxy-protocol and http01 challenge #38

splattner opened this issue Jan 27, 2023 · 1 comment

Comments

@splattner
Copy link
Member

splattner commented Jan 27, 2023

When the proxy-protocol is enabled, http01 challenges are not working.
Cert-manager tries to validate the http01 challenge and for some reason, kubernetes redirects the correctly made call to the external ip adress of the loadbalancer, directly to the nginx ingress controller pod. As the external LoadBalancer does use the proxy-protocol and nginx ingress controller has use-proxy-protocol enabled, the call from cert-manager fails.

See cert-manager/cert-manager#466 & kubernetes/kubernetes#66607

and see also https://github.com/compumike/hairpin-proxy

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant