Ingress not using the kubernetes secret certificate, instead uses default generated

colegatron · August 25, 2022, 4:22pm

I am using traefik 2.8.0 (I'm migrating from 1.7) which worked flawlessly.

The ingress is configured as you can see below and the certificate has been generated using cert-manager.
For some reason traefik is not serving the certificate but the default one, despite the cert if loaded into the tlsStore (see in traefik logs: "No store is defined to add the certificate MIIFLzCCBBegAwIBAgISAy4CV8NWeV7oGB5fH1kOasBiMA0GCS, it will be added to the default store.")

I have spent bunch of hours looking if I am missing something, but I can not find anything :-/
Hope you can help me to pinpoint the issue

Thanks

Traefik 2.8.0 config:

--global.checknewversion 
--global.sendanonymoususage 
--api.debug=true 
--entrypoints.metrics.address=: 9100/tcp 
--entrypoints.traefik.address=: 9000/tcp 
--entrypoints.web.address=: 8000/tcp 
--entrypoints.websecure.address=: 8443/tcp 
--api.dashboard=true 
--ping=true 
--metrics.prometheus=true 
--metrics.prometheus.entrypoint=metrics 
--providers.kubernetescrd 
--providers.kubernetescrd.ingressClass=traefik-front 
--providers.kubernetescrd.allowCrossNamespace=true 
--providers.kubernetescrd.allowExternalNameServices=true 
--providers.kubernetesingress 
--providers.kubernetesingress.allowExternalNameServices=true 
--providers.kubernetesingress.ingressClass=traefik-front 
--entrypoints.websecure.http.tls=true 
--entrypoints.websecure.http.tls.domains[0].main=domain.com 
--entrypoints.websecure.http.tls.domains[0].sans=*.domain.com,*.h.domain.com,*.b.domain.com,*.f.domain.com,domain.it,*.domain.it 
--log.format=common 
--log.level=DEBUG 
--accesslog=true 
--accesslog.format=json 
--accesslog.fields.defaultmode=keep 
--accesslog.fields.headers.defaultmode=keep 
--accesslog.fields.headers.names.Authorization=drop 
--ping 
--api.insecure 
--entrypoints.web.proxyProtocol.trustedIPS=a.b.c.d/32 
--entrypoints.websecure.proxyProtocol.trustedIPS=a.b.c.d/32

The ingress:

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: whoami
  namespace: ingresses
  annotations:
    traefik.ingress.kubernetes.io/router.tls: "true"
    traefik.ingress.kubernetes.io/router.entrypoints: web,websecure
spec:
  ingressClassName: traefik-front
  tls:
  - hosts:
    - whoami.h.domain.com
    secretName: cert-whoami.h.domain.com
  rules:
  - host: whoami.h.domain.com
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: whoami
            port:
              number: 80
--

Certificate:

$ kubectl describe certs whoami.h.domain.com-certificate

Name:         whoami.h.domain.com-certificate
Namespace:    ingresses
Labels:       <none>
API Version:  cert-manager.io/v1
Kind:         Certificate
Spec:
  Dns Names:
    whoami.h.domain.com
  Issuer Ref:
    Kind:       ClusterIssuer
    Name:       cert-manager-production-issuer
  Secret Name:  cert-whoami.h.domain.com
Status:
  Conditions:
    Last Transition Time: 2022-08-25T13: 32: 28Z
    Message:               Certificate is up to date and has not expired
    Observed Generation: 1
    Reason:                Ready
    Status:                True
    Type:                  Ready
  Not After: 2022-11-23T12: 32: 26Z
  Not Before: 2022-08-25T12: 32: 27Z
  Renewal Time: 2022-10-24T12: 32: 26Z
  Revision: 1
Events:                    <none>
----

Traefik Logs when deploying the ingress:

time="2022-08-25T16:05:31Z" level=error msg="Cannot create service: service not found" servicePort="&ServiceBackendPort{Name:,Number:80,}" providerName=kubernetes ingress=whoami namespace=ingresses serviceName=whoami
time="2022-08-25T16:05:31Z" level=debug msg="Configuration received: {\"http\":{\"routers\":{\"traefik-front-dashboard-ingresses-traefik-front-h-domain.com\":{\"service\":\"ingresses-traefik-front-dashboard-svc-9000\",\"rule\":\"Host(`traefik-front.h.domain.com`) \\u0026\\u0026 PathPrefix(`/`)\"}},\"services\":{\"ingresses-traefik-front-dashboard-svc-9000\":{\"loadBalancer\":{\"servers\":[{\"url\":\"http://10.42.0.21:9000\"}],\"passHostHeader\":true}}}},\"tcp\":{},\"udp\":{},\"tls\":{}}" providerName=kubernetes
time="2022-08-25T16:05:31Z" level=debug msg="No entryPoint defined for this router, using the default one(s) instead: [metrics web websecure]" routerName=traefik-front-dashboard-ingresses-traefik-front-h-domain.com
time="2022-08-25T16:05:31Z" level=debug msg="No default certificate, generating one" tlsStoreName=default
time="2022-08-25T16:05:31Z" level=debug msg="No store is defined to add the certificate MIIFbTCCBFWgAwIBAgITAPrtnIbUTxvHT3A3/eikJ0UZkjANBg, it will be added to the default store."
time="2022-08-25T16:05:31Z" level=debug msg="Adding certificate for domain(s) traefik-front.h.domain.com"
time="2022-08-25T16:05:31Z" level=debug msg="No store is defined to add the certificate MIIFLzCCBBegAwIBAgISAy4CV8NWeV7oGB5fH1kOasBiMA0GCS, it will be added to the default store."
time="2022-08-25T16:05:31Z" level=debug msg="Adding certificate for domain(s) whoami.h.domain.com"
time="2022-08-25T16:05:31Z" level=debug msg="Added outgoing tracing middleware prometheus@internal" entryPointName=metrics middlewareName=tracing middlewareType=TracingForwarder routerName=prometheus@internal
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" routerName=traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes entryPointName=metrics serviceName=ingresses-traefik-front-dashboard-svc-9000 middlewareName=pipelining middlewareType=Pipelining
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" middlewareType=Metrics routerName=traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes entryPointName=metrics serviceName=ingresses-traefik-front-dashboard-svc-9000 middlewareName=metrics-service
time="2022-08-25T16:05:31Z" level=debug msg="Creating load-balancer" routerName=traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes entryPointName=metrics serviceName=ingresses-traefik-front-dashboard-svc-9000
time="2022-08-25T16:05:31Z" level=debug msg="Creating server 0 http://10.42.0.21:9000" entryPointName=metrics serviceName=ingresses-traefik-front-dashboard-svc-9000 serverName=0 routerName=traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes
time="2022-08-25T16:05:31Z" level=debug msg="child http://10.42.0.21:9000 now UP"
time="2022-08-25T16:05:31Z" level=debug msg="Propagating new UP status"
time="2022-08-25T16:05:31Z" level=debug msg="Added outgoing tracing middleware ingresses-traefik-front-dashboard-svc-9000" entryPointName=metrics routerName=traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes middlewareName=tracing middlewareType=TracingForwarder
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" middlewareType=Recovery entryPointName=metrics middlewareName=traefik-internal-recovery
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" middlewareType=Recovery entryPointName=web middlewareName=traefik-internal-recovery
time="2022-08-25T16:05:31Z" level=debug msg="Added outgoing tracing middleware api@internal" routerName=ingresses-traefik-front-dashboard-d012b7f875133eeab4e5@kubernetescrd middlewareName=tracing middlewareType=TracingForwarder entryPointName=traefik
time="2022-08-25T16:05:31Z" level=debug msg="Added outgoing tracing middleware dashboard@internal" entryPointName=traefik routerName=dashboard@internal middlewareType=TracingForwarder middlewareName=tracing
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" routerName=dashboard@internal middlewareType=StripPrefix middlewareName=dashboard_stripprefix@internal entryPointName=traefik
time="2022-08-25T16:05:31Z" level=debug msg="Adding tracing to middleware" entryPointName=traefik routerName=dashboard@internal middlewareName=dashboard_stripprefix@internal
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" middlewareType=RedirectRegex entryPointName=traefik routerName=dashboard@internal middlewareName=dashboard_redirect@internal
time="2022-08-25T16:05:31Z" level=debug msg="Setting up redirection from ^(http:\\/\\/(\\[[\\w:.]+\\]|[\\w\\._-]+)(:\\d+)?)\\/$ to ${1}/dashboard/" entryPointName=traefik routerName=dashboard@internal middlewareName=dashboard_redirect@internal middlewareType=RedirectRegex
time="2022-08-25T16:05:31Z" level=debug msg="Adding tracing to middleware" routerName=dashboard@internal entryPointName=traefik middlewareName=dashboard_redirect@internal
time="2022-08-25T16:05:31Z" level=debug msg="Added outgoing tracing middleware api@internal" middlewareType=TracingForwarder entryPointName=traefik routerName=debug@internal middlewareName=tracing
time="2022-08-25T16:05:31Z" level=debug msg="Added outgoing tracing middleware ping@internal" middlewareName=tracing middlewareType=TracingForwarder entryPointName=traefik routerName=ping@internal
time="2022-08-25T16:05:31Z" level=debug msg="Added outgoing tracing middleware api@internal" routerName=api@internal middlewareName=tracing middlewareType=TracingForwarder entryPointName=traefik
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" middlewareName=traefik-internal-recovery middlewareType=Recovery entryPointName=traefik
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" middlewareType=Metrics middlewareName=metrics-entrypoint entryPointName=metrics
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" middlewareName=metrics-entrypoint middlewareType=Metrics entryPointName=traefik
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" entryPointName=web middlewareName=metrics-entrypoint middlewareType=Metrics
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" middlewareType=Metrics entryPointName=websecure middlewareName=metrics-entrypoint
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" routerName=websecure-traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes serviceName=ingresses-traefik-front-dashboard-svc-9000 middlewareName=pipelining middlewareType=Pipelining entryPointName=websecure
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" entryPointName=websecure routerName=websecure-traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes serviceName=ingresses-traefik-front-dashboard-svc-9000 middlewareType=Metrics middlewareName=metrics-service
time="2022-08-25T16:05:31Z" level=debug msg="Creating load-balancer" serviceName=ingresses-traefik-front-dashboard-svc-9000 entryPointName=websecure routerName=websecure-traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes
time="2022-08-25T16:05:31Z" level=debug msg="Creating server 0 http://10.42.0.21:9000" serverName=0 entryPointName=websecure routerName=websecure-traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes serviceName=ingresses-traefik-front-dashboard-svc-9000
time="2022-08-25T16:05:31Z" level=debug msg="child http://10.42.0.21:9000 now UP"
time="2022-08-25T16:05:31Z" level=debug msg="Propagating new UP status"
time="2022-08-25T16:05:31Z" level=debug msg="Added outgoing tracing middleware ingresses-traefik-front-dashboard-svc-9000" middlewareName=tracing middlewareType=TracingForwarder entryPointName=websecure routerName=websecure-traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" entryPointName=websecure middlewareName=traefik-internal-recovery middlewareType=Recovery
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" middlewareName=metrics-entrypoint middlewareType=Metrics entryPointName=metrics
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" middlewareType=Metrics entryPointName=traefik middlewareName=metrics-entrypoint
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" entryPointName=web middlewareName=metrics-entrypoint middlewareType=Metrics
time="2022-08-25T16:05:31Z" level=debug msg="Creating middleware" entryPointName=websecure middlewareType=Metrics middlewareName=metrics-entrypoint
time="2022-08-25T16:05:31Z" level=debug msg="Adding route for traefik-front.h.domain.com with TLS options default" entryPointName=websecure
time="2022-08-25T16:05:31Z" level=error msg="Cannot create service: endpoints not found" providerName=kubernetes serviceName=whoami ingress=whoami namespace=ingresses servicePort="&ServiceBackendPort{Name:,Number:80,}"
time="2022-08-25T16:05:31Z" level=debug msg="Skipping Kubernetes event kind *v1.Service" providerName=kubernetes
time="2022-08-25T16:05:31Z" level=debug msg="Skipping Kubernetes event kind *v1.Service" providerName=kubernetescrd
time="2022-08-25T16:05:31Z" level=debug msg="Skipping Kubernetes event kind *v1.Endpoints" providerName=kubernetescrd
time="2022-08-25T16:05:31Z" level=error msg="Skipping service: no endpoints found" servicePort="&ServiceBackendPort{Name:,Number:80,}" serviceName=whoami providerName=kubernetes ingress=whoami namespace=ingresses
time="2022-08-25T16:05:31Z" level=debug msg="Skipping Kubernetes event kind *v1.Endpoints" providerName=kubernetes
time="2022-08-25T16:05:34Z" level=debug msg="Skipping Kubernetes event kind *v1.Endpoints" providerName=kubernetescrd
time="2022-08-25T16:05:34Z" level=debug msg="Configuration received: {\"http\":{\"routers\":{\"traefik-front-dashboard-ingresses-traefik-front-h-domain.com\":{\"service\":\"ingresses-traefik-front-dashboard-svc-9000\",\"rule\":\"Host(`traefik-front.h.domain.com`) \\u0026\\u0026 PathPrefix(`/`)\"},\"whoami-ingresses-whoami-h-domain.com\":{\"entryPoints\":[\"web\",\"websecure\"],\"service\":\"ingresses-whoami-80\",\"rule\":\"Host(`whoami.h.domain.com`) \\u0026\\u0026 PathPrefix(`/`)\",\"tls\":{}}},\"services\":{\"ingresses-traefik-front-dashboard-svc-9000\":{\"loadBalancer\":{\"servers\":[{\"url\":\"http://10.42.0.21:9000\"}],\"passHostHeader\":true}},\"ingresses-whoami-80\":{\"loadBalancer\":{\"servers\":[{\"url\":\"http://10.42.5.209:80\"}],\"passHostHeader\":true}}}},\"tcp\":{},\"udp\":{},\"tls\":{}}" providerName=kubernetes
time="2022-08-25T16:05:34Z" level=debug msg="No entryPoint defined for this router, using the default one(s) instead: [metrics web websecure]" routerName=traefik-front-dashboard-ingresses-traefik-front-h-domain.com
time="2022-08-25T16:05:34Z" level=debug msg="No default certificate, generating one" tlsStoreName=default
time="2022-08-25T16:05:34Z" level=debug msg="No store is defined to add the certificate MIIFbTCCBFWgAwIBAgITAPrtnIbUTxvHT3A3/eikJ0UZkjANBg, it will be added to the default store."
time="2022-08-25T16:05:34Z" level=debug msg="Adding certificate for domain(s) traefik-front.h.domain.com"
time="2022-08-25T16:05:34Z" level=debug msg="No store is defined to add the certificate MIIFLzCCBBegAwIBAgISAy4CV8NWeV7oGB5fH1kOasBiMA0GCS, it will be added to the default store."
time="2022-08-25T16:05:34Z" level=debug msg="Adding certificate for domain(s) whoami.h.domain.com"
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" entryPointName=metrics routerName=traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes serviceName=ingresses-traefik-front-dashboard-svc-9000 middlewareName=pipelining middlewareType=Pipelining
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" middlewareName=metrics-service middlewareType=Metrics entryPointName=metrics routerName=traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes serviceName=ingresses-traefik-front-dashboard-svc-9000
time="2022-08-25T16:05:34Z" level=debug msg="Creating load-balancer" serviceName=ingresses-traefik-front-dashboard-svc-9000 entryPointName=metrics routerName=traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes
time="2022-08-25T16:05:34Z" level=debug msg="Creating server 0 http://10.42.0.21:9000" serviceName=ingresses-traefik-front-dashboard-svc-9000 entryPointName=metrics serverName=0 routerName=traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes
time="2022-08-25T16:05:34Z" level=debug msg="child http://10.42.0.21:9000 now UP"
time="2022-08-25T16:05:34Z" level=debug msg="Propagating new UP status"
time="2022-08-25T16:05:34Z" level=debug msg="Added outgoing tracing middleware ingresses-traefik-front-dashboard-svc-9000" middlewareType=TracingForwarder entryPointName=metrics routerName=traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes middlewareName=tracing
time="2022-08-25T16:05:34Z" level=debug msg="Added outgoing tracing middleware prometheus@internal" entryPointName=metrics routerName=prometheus@internal middlewareName=tracing middlewareType=TracingForwarder
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" entryPointName=metrics middlewareName=traefik-internal-recovery middlewareType=Recovery
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" entryPointName=web middlewareName=traefik-internal-recovery middlewareType=Recovery
time="2022-08-25T16:05:34Z" level=debug msg="Added outgoing tracing middleware dashboard@internal" entryPointName=traefik routerName=dashboard@internal middlewareName=tracing middlewareType=TracingForwarder
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" middlewareName=dashboard_stripprefix@internal middlewareType=StripPrefix entryPointName=traefik routerName=dashboard@internal
time="2022-08-25T16:05:34Z" level=debug msg="Adding tracing to middleware" entryPointName=traefik routerName=dashboard@internal middlewareName=dashboard_stripprefix@internal
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" middlewareName=dashboard_redirect@internal middlewareType=RedirectRegex entryPointName=traefik routerName=dashboard@internal
time="2022-08-25T16:05:34Z" level=debug msg="Setting up redirection from ^(http:\\/\\/(\\[[\\w:.]+\\]|[\\w\\._-]+)(:\\d+)?)\\/$ to ${1}/dashboard/" middlewareType=RedirectRegex entryPointName=traefik routerName=dashboard@internal middlewareName=dashboard_redirect@internal
time="2022-08-25T16:05:34Z" level=debug msg="Adding tracing to middleware" middlewareName=dashboard_redirect@internal entryPointName=traefik routerName=dashboard@internal
time="2022-08-25T16:05:34Z" level=debug msg="Added outgoing tracing middleware api@internal" entryPointName=traefik routerName=ingresses-traefik-front-dashboard-d012b7f875133eeab4e5@kubernetescrd middlewareName=tracing middlewareType=TracingForwarder
time="2022-08-25T16:05:34Z" level=debug msg="Added outgoing tracing middleware ping@internal" middlewareName=tracing middlewareType=TracingForwarder entryPointName=traefik routerName=ping@internal
time="2022-08-25T16:05:34Z" level=debug msg="Added outgoing tracing middleware api@internal" entryPointName=traefik routerName=debug@internal middlewareName=tracing middlewareType=TracingForwarder
time="2022-08-25T16:05:34Z" level=debug msg="Added outgoing tracing middleware api@internal" middlewareType=TracingForwarder entryPointName=traefik routerName=api@internal middlewareName=tracing
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" middlewareType=Recovery entryPointName=traefik middlewareName=traefik-internal-recovery
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" middlewareName=metrics-entrypoint middlewareType=Metrics entryPointName=metrics
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" entryPointName=traefik middlewareName=metrics-entrypoint middlewareType=Metrics
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" middlewareType=Metrics middlewareName=metrics-entrypoint entryPointName=web
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" middlewareName=metrics-entrypoint middlewareType=Metrics entryPointName=websecure
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" serviceName=ingresses-whoami-80 entryPointName=web routerName=whoami-ingresses-whoami-h-domain.com@kubernetes middlewareName=pipelining middlewareType=Pipelining
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" serviceName=ingresses-whoami-80 entryPointName=web routerName=whoami-ingresses-whoami-h-domain.com@kubernetes middlewareName=metrics-service middlewareType=Metrics
time="2022-08-25T16:05:34Z" level=debug msg="Creating load-balancer" serviceName=ingresses-whoami-80 entryPointName=web routerName=whoami-ingresses-whoami-h-domain.com@kubernetes
time="2022-08-25T16:05:34Z" level=debug msg="Creating server 0 http://10.42.5.209:80" serviceName=ingresses-whoami-80 serverName=0 entryPointName=web routerName=whoami-ingresses-whoami-h-domain.com@kubernetes
time="2022-08-25T16:05:34Z" level=debug msg="child http://10.42.5.209:80 now UP"
time="2022-08-25T16:05:34Z" level=debug msg="Propagating new UP status"
time="2022-08-25T16:05:34Z" level=debug msg="Added outgoing tracing middleware ingresses-whoami-80" routerName=whoami-ingresses-whoami-h-domain.com@kubernetes middlewareName=tracing middlewareType=TracingForwarder entryPointName=web
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" middlewareName=traefik-internal-recovery middlewareType=Recovery entryPointName=web
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" routerName=websecure-whoami-ingresses-whoami-h-domain.com@kubernetes serviceName=ingresses-whoami-80 middlewareName=pipelining middlewareType=Pipelining entryPointName=websecure
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" entryPointName=websecure routerName=websecure-whoami-ingresses-whoami-h-domain.com@kubernetes serviceName=ingresses-whoami-80 middlewareName=metrics-service middlewareType=Metrics
time="2022-08-25T16:05:34Z" level=debug msg="Creating load-balancer" serviceName=ingresses-whoami-80 entryPointName=websecure routerName=websecure-whoami-ingresses-whoami-h-domain.com@kubernetes
time="2022-08-25T16:05:34Z" level=debug msg="Creating server 0 http://10.42.5.209:80" serverName=0 entryPointName=websecure routerName=websecure-whoami-ingresses-whoami-h-domain.com@kubernetes serviceName=ingresses-whoami-80
time="2022-08-25T16:05:34Z" level=debug msg="child http://10.42.5.209:80 now UP"
time="2022-08-25T16:05:34Z" level=debug msg="Propagating new UP status"
time="2022-08-25T16:05:34Z" level=debug msg="Added outgoing tracing middleware ingresses-whoami-80" routerName=websecure-whoami-ingresses-whoami-h-domain.com@kubernetes middlewareName=tracing middlewareType=TracingForwarder entryPointName=websecure
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" routerName=websecure-traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes serviceName=ingresses-traefik-front-dashboard-svc-9000 middlewareName=pipelining middlewareType=Pipelining entryPointName=websecure
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" serviceName=ingresses-traefik-front-dashboard-svc-9000 entryPointName=websecure routerName=websecure-traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes middlewareName=metrics-service middlewareType=Metrics
time="2022-08-25T16:05:34Z" level=debug msg="Creating load-balancer" routerName=websecure-traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes serviceName=ingresses-traefik-front-dashboard-svc-9000 entryPointName=websecure
time="2022-08-25T16:05:34Z" level=debug msg="Creating server 0 http://10.42.0.21:9000" serverName=0 entryPointName=websecure routerName=websecure-traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes serviceName=ingresses-traefik-front-dashboard-svc-9000
time="2022-08-25T16:05:34Z" level=debug msg="child http://10.42.0.21:9000 now UP"
time="2022-08-25T16:05:34Z" level=debug msg="Propagating new UP status"
time="2022-08-25T16:05:34Z" level=debug msg="Added outgoing tracing middleware ingresses-traefik-front-dashboard-svc-9000" routerName=websecure-traefik-front-dashboard-ingresses-traefik-front-h-domain.com@kubernetes entryPointName=websecure middlewareName=tracing middlewareType=TracingForwarder
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" entryPointName=websecure middlewareName=traefik-internal-recovery middlewareType=Recovery
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" entryPointName=metrics middlewareName=metrics-entrypoint middlewareType=Metrics
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" middlewareName=metrics-entrypoint middlewareType=Metrics entryPointName=traefik
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" middlewareName=metrics-entrypoint middlewareType=Metrics entryPointName=web
time="2022-08-25T16:05:34Z" level=debug msg="Creating middleware" middlewareType=Metrics entryPointName=websecure middlewareName=metrics-entrypoint
time="2022-08-25T16:05:34Z" level=debug msg="Adding route for whoami.h.domain.com with TLS options default" entryPointName=web
time="2022-08-25T16:05:34Z" level=debug msg="Adding route for whoami.h.domain.com with TLS options default" entryPointName=websecure
time="2022-08-25T16:05:34Z" level=debug msg="Adding route for traefik-front.h.domain.com with TLS options default" entryPointName=websecure

douglasdtm · September 2, 2022, 6:40pm

Hi @colegatron , can you show the result of a curl request to that router host?

curl -v -k -L https://whoami.h.domain.com

or if there is no DNS configured for your local env you can hit the Traefik service external address (alocated by Kubernetes):

curl -v -k -L -H "Host:whoami.h.domain.com" <traefik-service-address>

Topic		Replies	Views
How to use my own certificates into the configmap configuration. K8s Traefik v2 kubernetes-ingress	15	5037	November 13, 2019
Traefik default tls on kubernetes Traefik v2 file , kubernetes-ingress	2	1197	December 28, 2021
Kubernetes IngressRoute with TLS secret Traefik v2 kubernetes-ingress	2	3149	November 12, 2019
Is a non-TLS Kubernetes Ingress not offered over default HTTPS anymore? Traefik v2 kubernetes-ingress	0	266	April 14, 2021
Minimal but meaningful v2.0 GKE configuration Traefik v2 kubernetes-crd , kubernetes-ingress	0	650	August 12, 2019

Ingress not using the kubernetes secret certificate, instead uses default generated

Traefik 2.8.0 config:

The ingress:

Certificate:

Traefik Logs when deploying the ingress:

Related Topics