cert-manager
Hard
Concepts
What does the Secret named in an ACME issuer's privateKeySecretRef contain?
Select your answer:
Show answer and explanation
Answer: The private key of cert-manager's ACME account
Explanation
cert-manager creates this key when the issuer is first set up and uses it to sign every request it sends to the ACME server, such as Let's Encrypt. If you delete it, cert-manager registers a new account. The private key for each certificate lives in that Certificate's own Secret.
More hard cert-manager questions
- Let's Encrypt fails HTTP-01 validation for app.example.com. Which URL must be reachable from the internet?
- A Certificate fails to issue several times in a row, for example because the issuer is misconfigured. How does cert-manager retry?
- Which cert-manager sub-project copies CA bundles into namespaces as ConfigMaps or Secrets, so applications can trust a private CA?
- Which cert-manager component issues a certificate straight into a pod's volume without creating a Secret?
- What has to happen to a CertificateRequest before an issuer will sign it?
- Which annotation tells cainjector to fill a webhook configuration's caBundle from a cert-manager Certificate?