Skip to content

cert-manager still issues Lets encrypt certificates with cross-signed DST Root CA3 #4491

@kk12345-png

Description

@kk12345-png

cert-manager installed on my kubernetes cluster still issues Lets encrypt certificates with cross-signed DST Root CA3, which Lets encrypt has marked "Expired".

I am using ACME as the client for issuing and renewing lets encrypt certificates.
I am using ClusterIssuer object to create certificates.
According to this link https://cert-manager.io/docs/configuration/acme/#use-an-alternative-certificate-chain , we have preferredChain option to use with "Issuer" Object, however, if i try to configure "preferredChain" with ClusterIssuer, it doesnt take that.
Doesnt return any error, when i try to edit ClusterIssuer and Save, but after Saving, i do not see the setting when viewing the spec.
Can anyone help on this issue

Metadata

Metadata

Assignees

No one assigned

    Labels

    triage/supportIndicates an issue that is a support question.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions