-
I installed the step-ca with the official helm, then using acme.sh standarlone method try to get a SSL certificate, I am using ingress to expose the step-ca service, the pod is listenling on port 9000 and ofcourse after I exposed it with ingress, it become https://ca.example.com, then the http-01 challenge will fail, because the step-ca pod see the natted "remote-address":"10.244.4.56" instead of the actually acme.sh client address. for technical reason I can't use DNS challenge, is there any other way of get acme working in this situation? I know it's maybe more of acme protocol and k8s problem, but just want to get some lights here, thanks. |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
Sorry, my bad, my DNS resolve IP was wrong, it's all working. |
Beta Was this translation helpful? Give feedback.
Sorry, my bad, my DNS resolve IP was wrong, it's all working.