Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

certificates stuck processing adcsrequests #11

Open
BatmaniNRobin opened this issue Jul 1, 2021 · 1 comment
Open

certificates stuck processing adcsrequests #11

BatmaniNRobin opened this issue Jul 1, 2021 · 1 comment

Comments

@BatmaniNRobin
Copy link

Downloaded and installed adcs issuer according to documentation, as well as extra documentation found at this github fork. When certificates are created / kube applied, the certificate generates a certificate request with a matching adcsrequest identical to that of the certificate request as expected. However, beyond this point, there is no sign of forward progress being made. Actions have been taking to debug this via use of an actual ADCS instance, the simulator hosted locally as well as varying control managers, images and API Versions to no avail. It does not appear that any connection is being attempted by the issuer itself. Furthermore, the simulator does not receive any attempts at a connection either as it remains idle at cd test/adcs-sim && go run main.go -dns example.com && cd - Startign with id = 0 as expected with no connection attempts at all.

The environment is an on-prem single node Kubernetes cluster using rancher and traefik for ingress that is attempting to connect to an intermediary ADCS node. We believe that the caBundle as well as the NTLM authentication is correct when configuring the issuer, however even if this were incorrect it would be expected that the logs within ADCS would indicate rejections yet the node is not receiving any connection attempts at all. Upon executing kubectl describe certificaterequest <cr_name> within events it simply indicates that it is waiting and "processing ADCS request".

@JoshVanL @ctrought

@ctrought
Copy link

Did you check the logs of the controllers (both cert-manager and adcs) to see if there were any obvious errors?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants