# Traefik2.4: uses a non-existent resolver: inwx

**URL:** <https://community.traefik.io/t/traefik2-4-uses-a-non-existent-resolver-inwx/11283>\
**Category:** Traefik v2\
**Tags:** kubernetes-crd, cli, kubernetes-ingress, docker, letsencrypt-acme\
**Created:** [July 23, 2021, 10:06am UTC](https://community.traefik.io/t/traefik2-4-uses-a-non-existent-resolver-inwx/11283 "2021-07-23T10:06:41Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![flweber](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/flweber/32/4045_2.png) [@flweber](https://community.traefik.io/u/flweber)\
**Post date:** [July 23, 2021, 10:06am UTC](https://community.traefik.io/t/traefik2-4-uses-a-non-existent-resolver-inwx/11283/1 "2021-07-23T10:06:41Z")

</div>

Hi, i am hiting the issue resolver cannot be found, and read all the topic related, but got no answer

ENV:

- kubernetes v1.20.6
- traefik: 2.4.9

Traefik is beeing installed with helm chart. The values.yaml looks like:

```auto
image:
  name: traefik

globalArguments: # tried with "globalArguments" and "additionalArguments"
  - "--api.insecure=true"
  - "--accesslog=false"
  - "--log.level=DEBUG"
  - "--certificatesresolvers.inwx.acme.email= ***** @example.com"
  - "--certificatesresolvers.inwx.acme.caServer=https://acme-staging-v02.api.letsencrypt.org/directory"
  - "--certificatesresolvers.inwx.acme.dnschallenge=true"
  - "--certificatesresolvers.inwx.acme.dnschallenge.provider=inwx"
  - "--certificatesresolvers.inwx.acme.storage=/data/acme.json"

ingressRoute:
  dashboard:
    enabled: true
    insecure: true
  api:
    insecure: true

persistence:
  enabled: true
  accessMode: ReadWriteOnce
  size: 128Mi
  path: /data
  annotations: {}

env:
  - name: INWX_USERNAME
    valueFrom:
      secretKeyRef:
        name: inwx-dns
        key: INWX_USERNAME
  - name: INWX_PASSWORD
    valueFrom:
      secretKeyRef:
        name: inwx-dns
        key: INWX_PASSWORD

rbac:
  enabled: true
  namespaced: false

ports:
  traefik:
    port: 9000
    expose: true

```

result:  
an empty acme.json was created at the desired location but taefik print:  
the router flweber-whoami-ingress-flweber-test-foo-example-de-flweber-whoami@kubernetes uses a non-existent resolver: inwx

Ingress Definition:

```auto
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: flweber-whoami-ingress
  namespace: flweber-test
  annotations:
    kubernetes.io/ingress.class: traefik
    traefik.ingress.kubernetes.io/router.entrypoints: websecure
    traefik.ingress.kubernetes.io/router.tls: "true"
    traefik.ingress.kubernetes.io/router.tls.certresolver: "inwx"
    traefik.ingress.kubernetes.io/router.middlewares: flweber-test-flweber-stripprefix@kubernetescrd
spec:
  rules:
    - host: foo.example.de
      http:
        paths:
          - path: /flweber-whoami
            pathType: Prefix
            backend:
              service:
                name: flweber-whoami
                port:
                  number: 80

```

thanks in advance

- I had to replace all domains with placeholders. I'm not using [example.com](http://example.com) or [example.de](http://example.de) in the real configuration

---

<div class="post-metadata">

**Author:** ![daniel.tomcej](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/daniel.tomcej/32/262_2.png) [@daniel.tomcej](https://community.traefik.io/u/daniel.tomcej)\
**Post date:** [July 23, 2021, 6:11pm UTC](https://community.traefik.io/t/traefik2-4-uses-a-non-existent-resolver-inwx/11283/2 "2021-07-23T18:11:35Z")

</div>

Hello @flweber,

Can you provide a copy of the debug log when traefik starts up?

---

<div class="post-metadata">

**Author:** ![flweber](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/flweber/32/4045_2.png) [@flweber](https://community.traefik.io/u/flweber)\
**Post date:** [July 27, 2021, 7:12am UTC](https://community.traefik.io/t/traefik2-4-uses-a-non-existent-resolver-inwx/11283/3 "2021-07-27T07:12:15Z")

</div>

Hello @daniel.tomcej ,  
sorry for my late reply.  
I have found the following output in my logs:

```auto
time="2021-07-26T09:56:43Z" level=error msg="The ACME resolver \"inwx\" is skipped from the resolvers list because: unable to get ACME account: permissions 660 for /data/acme.json are too open, please use 600"

```

I fixed it with an init container which changes the permission before traefik starts:

```auto
deployment:
  initContainers:
    - name: volume-permissions
      image: busybox:1.31.1
      command: ["sh", "-c", "chmod -Rv 600 /data/*"]
      volumeMounts:
        - name: data
          mountPath: /data

```

The first startup of traefik works fine but a `helm upgrade` broke it. With the init container all is working fine but is there a better way to fix this issue?