cert-manager
Medium
Troubleshooting
What problem does the status.acme.ari.certID field added in cert-manager v1.21.3 fix?
Select your answer:
Show answer and explanation
Answer: A renewal loop caused by an ARI window from the previous certificate
Explanation
With the alpha ACMEUseARI feature gate on, cert-manager stores the CA's suggested renewal window in status.acme.ari. The window wasn't tied to a certificate, so after a reissue a stale window could trigger repeated re-issuance until the CA rate limit was hit. certID records which certificate the window belongs to, and the field is new in the v1.21.3 CRDs, so upgrade them too.
More medium cert-manager questions
- What is the difference between an Issuer and a ClusterIssuer in cert-manager?
- Which of the following is NOT a valid cert-manager issuer type?
- What is the purpose of a CertificateRequest in cert-manager?
- Which challenge type is NOT supported by the ACME issuer in cert-manager?
- How does cert-manager handle certificate renewal?
- Which of the following is a valid way to configure a DNS-01 challenge solver for the ACME issuer?