0

Folks, am trying to renew certificates for a wildcard domain, and am seeing the following errors when looking at the logs on the certmanager pod, and at the error in the certificaterequest

Message:               Waiting on certificate issuance from order 
production/certmanager-xxxxxxxxx-pp9n2-3392968554: "pending"

production/cert-manager-877fd747c-4nf2f[cert-manager]: E0817 21:32:34.447585       1 
controller.go:166] cert-manager/challenges "msg"="re-queuing item due to error 
processing" "error"="failed to change Route 53 record set: InvalidChangeBatch: [RRSet 
with DNS name _acme-challenge.xxxxxx.com., type TXT, SetIdentifier 
\"xxxxxxx\" cannot be created because a non 
multivalue answer rrset exists with the same name and type.]" 
"key"="production/certmanager-xxxx-pp9n2-3392968554-1376642102"

Do I need to update the TXT record in DNS? Currently it is set to a different value than the SetIdentifier value from the output above.

Also noticing a strange error in the log. The pod name mention is incorrect, there is a different pod by another name running:

 production/cert-manager-877fd747c-4nf2f[cert-manager]: E0817 21:45:46.379332       1 
 controller.go:208] cert-manager/challenges "msg"="challenge in work queue no longer 
 exists" "error"="challenge.acme.cert-manager.io \"certmanager-idrive-ssl-srvw4- 
 3392968554-1376642102\" not found" 

Thanks!

Cmag
  • 14,946
  • 25
  • 89
  • 140

0 Answers0