# Level=error msg="Error getting challenge for token retrying

**URL:** https://community.traefik.io/t/level-error-msg-error-getting-challenge-for-token-retrying/9011
**Category:** Traefik v2
**Tags:** kubernetes-crd, letsencrypt-acme
**Created:** [December 15, 2020, 2:57pm UTC](https://community.traefik.io/t/level-error-msg-error-getting-challenge-for-token-retrying/9011 "2020-12-15T14:57:05Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![harunaya](https://avatars.discourse-cdn.com/v4/letter/h/779978/32.png) [@harunaya](https://community.traefik.io/u/harunaya)
#### Post date: [December 15, 2020, 2:57pm UTC](https://community.traefik.io/t/level-error-msg-error-getting-challenge-for-token-retrying/9011/1 "2020-12-15T14:57:05Z")

</div>

I have a problem getting lets encrypt certificates to be generated in my cluster k8s  
My logs

```auto
time="2020-12-15T13:33:36Z" level=error msg="Error getting challenge for token retrying in 14.029373456s" providerName=le.acme
time="2020-12-15T13:33:50Z" level=error msg="Error getting challenge for token retrying in 22.912714797s" providerName=le.acme
time="2020-12-15T13:34:13Z" level=error msg="Cannot retrieve the ACME challenge for token 3Macqex1WfIrFYkhdpHI_wxgeSIC9XsPTs9aaILkqlg: cannot find challenge for token 3Macqex1WfIrFYkhdpHI_wxgeSIC9XsPTs9aaILkqlg" providerName=le.acme
time="2020-12-15T13:34:26Z" level=error msg="Unable to obtain ACME certificate for domains \"traefik.a.r.telemaque.fr\": unable to generate a certificate for the domains [traefik.a.r.telemaque.fr]: acme: Error -> One or more domains had a problem:\n[traefik.a.r.telemaque.fr] acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: Invalid response from http://traefik.a.r.telemaque.fr/.well-known/acme-challenge/dIofJEuv4P-KfwcLIx_mOBI-dR5vAJTaWbVw2NEsoNU [34.76.27.107]: 404, url: \n" providerName=le.acme rule="Host(`traefik.a.r.telemaque.fr`) || PathPrefix(`/`)" routerName=default-ingressroutetls-88fc30e2c76222c6cc6a@kubernetescrd
time="2020-12-15T13:46:12Z" level=error msg="Cannot retrieve the ACME challenge for token dIofJEuv4P-KfwcLIx_mOBI-dR5vAJTaWbVw2NEsoNU: cannot find challenge for token dIofJEuv4P-KfwcLIx_mOBI-dR5vAJTaWbVw2NEsoNU" providerName=le.acme

```

---

<div class="post-metadata">

### Author: ![cakiwi](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/cakiwi/32/3205_2.png) [@cakiwi](https://community.traefik.io/u/cakiwi)
#### Post date: [December 16, 2020, 2:21pm UTC](https://community.traefik.io/t/level-error-msg-error-getting-challenge-for-token-retrying/9011/2 "2020-12-16T14:21:52Z")

</div>

Are you sure the domain is pointing at the correct ip and/or any intermediate is passing to your traefik instance correctly? 403 Access denied you should not be receiving when generating a certificate.

I see this one involves kubenetescrd. Not my area of expertise, updating tags.