cert-manager
Hard
Troubleshooting
Let's Encrypt can reach an HTTP-01 challenge URL, but cert-manager's self-check can't because the network has no NAT loopback. Which cert-manager 1.21 solver option handles this?
Select your answer:
Show answer and explanation
Answer: waitInsteadOfSelfCheck
Explanation
Added in cert-manager 1.21, waitInsteadOfSelfCheck on an http01 or dns01 solver skips the self-check and waits the given duration after presenting the challenge before asking the ACME server to validate. It is meant for NAT loopback limits, split-horizon DNS and similar setups. A delay that is too short lets validation start before the solver is reachable.
More hard cert-manager questions
- Which of the following is a valid way to revoke a certificate in cert-manager?
- Which of the following is a valid way to configure a Vault issuer?
- What is the purpose of the 'keystores' field in a Certificate resource?
- What is the purpose of the 'encodeUsagesInRequest' field in a Certificate resource?
- Which of the following is a valid way to debug a failing HTTP-01 challenge?
- Which of the following is a valid way to configure a DNS-01 challenge for a Route53 provider?