cert-manager
Hard
Troubleshooting
A Certificate fails to issue several times in a row, for example because the issuer is misconfigured. How does cert-manager retry?
Select your answer:
Show answer and explanation
Answer: With an exponentially increasing delay, from 1 hour up to 32 hours by default
Explanation
After a failed issuance, cert-manager waits longer before each new attempt, starting at 1 hour and capped at 32 hours. Both limits can be changed with controller flags. This keeps a broken setup from hammering the ACME server. Once you fix the cause, 'cmctl renew' retries straight away.
More hard cert-manager questions
- Which cert-manager sub-project copies CA bundles into namespaces as ConfigMaps or Secrets, so applications can trust a private CA?
- Which cert-manager component issues a certificate straight into a pod's volume without creating a Secret?
- What has to happen to a CertificateRequest before an issuer will sign it?
- Which annotation tells cainjector to fill a webhook configuration's caBundle from a cert-manager Certificate?
- cert-manager can't be given API access to the DNS zone for example.com. How can you still use DNS-01 for it?
- Which of the following is a valid way to revoke a certificate in cert-manager?