Folks - I'm Helm-installing Cert Manager, Traefik, and Rancher on k8s 1.28.
helm -n traefik list
:
NAME NAMESPACE REVISION UPDATED STATUS CHART APP VERSION
traefik traefik 1 2024-05-07 07:17:23.41361965 -0400 EDT deployed traefik-22.1.0 v2.9.10
The Rancher chart creates an Ingress and uses cert manager to create a TLS termination secret. The ingress is created before the tls termination secret:
rancher Ingress
:
creationTimestamp: "2024-05-07T11:18:49Z"
tls:
- hosts:
- redacted
secretName: tls-rancher-ingress
tls-rancher-ingress Secret
:
creationTimestamp: "2024-05-07T11:23:54Z"
In those few seconds, Traefik errors (many times) with:
level=error msg="Error configuring TLS: secret cattle-system/tls-rancher-ingress does not exist" ingress=rancher namespace=cattle-system providerName=kubernetes
And then gives up. The only solution I've found so far is to restart the Traefik deployment after all the charts finish deploying. Since I'm deploying all of these components with Helm, I have limited ability intervene in timing. Restarting the deployment is not idea esp. in a GitOps scenario.
Is this a known issue with a well-known work-around? Thanks