https://flyte.org logo
#flyte-deployment
Title
# flyte-deployment
a

Alex Beach

01/23/2024, 11:13 PM
Im trying to setup SSL with flyte-core: https://github.com/unionai-oss/deploy-flyte/tree/main/environments/gcp/flyte-core However, i do not see any certificate requests. Any ideas?
Copy code
kubectl get certificaterequest -n flyte
No resources found in flyte namespace.
Copy code
I0123 22:37:16.407193       7 main.go:104] "SSL fake certificate created" file="/etc/ingress-controller/ssl/default-fake-certificate.pem"
I0123 22:37:16.443794       7 ssl.go:533] "loading tls certificate" path="/usr/local/certificates/cert" key="/usr/local/certificates/key"
the nginx-ingress is issuing a fake certificagte
the ssl configuration in the terraform does not appear to be correct, but i can't figure out since the certificate appears to be issued
im not sure how to make the controller use the tls secret by default
im gonna try disabled ingress and re-enableing
d

David Espejo (he/him)

01/24/2024, 3:21 PM
Hi Alex
im gonna try disabled ingress and re-enableing
Did it work for you? Sometimes, the singed certificate issuance is delayed due to, for example, the time it takes for the DNS A record to propagate (this is true for the http challenge and the ACME provider that the Terraform modules use) In the meantime, cert-manager generates a "fake certificate"
a

Alex Beach

01/24/2024, 9:23 PM
I think the issue was DNS related. I got it working but exhuasted the production certificate requests. I am using the lets encrypt staging for now and that ssl is issued correctly
4 Views