propagation check failed on http01 request

[zadjadr]

propagation check failed on http01 request

[zadjadr]

This is how an external request looks:

❯ curl -Lk https://example.com/.well-known/acme-challenge/CJq38hxGhyAhn-XMk3hoSvO2H_VMtCje2v6jBkL_3Uo
CJq38hxGhyAhn-XMk3hoSvO2H_VMtCje2v6jBkL_3Uo.EZ2g2ZyzqixsT9l-SWZoLS31UKQSrcwwxUJo7f3Jmg0% 

❯ stern -n mynamespace cm-acme-http-solver-lv52m
+ cm-acme-http-solver-lv52m › acmesolver
cm-acme-http-solver-lv52m acmesolver I0315 14:32:35.333881       1 solver.go:51] "starting listener" logger="cert-manager.acmesolver" expected_domain="example.com" expected_token="CJq38hxGhyAhn-XMk3hoSvO2H_VMtCje2v6jBkL_3Uo" expected_key="CJq38hxGhyAhn-XMk3hoSvO2H_VMtCje2v6jBkL_3Uo.EZ2g2ZyzqixsT9l-SWZoLS31UKQSrcwwxUJo7f3Jmg0" listen_port=8089
cm-acme-http-solver-lv52m acmesolver I0315 14:33:11.679809       1 solver.go:76] "validating request" logger="cert-manager.acmesolver" host="example.com" path="/.well-known/acme-challenge/CJq38hxGhyAhn-XMk3hoSvO2H_VMtCje2v6jBkL_3Uo" base_path="/.well-known/acme-challenge" token="CJq38hxGhyAhn-XMk3hoSvO2H_VMtCje2v6jBkL_3Uo"
cm-acme-http-solver-lv52m acmesolver I0315 14:33:11.679939       1 solver.go:84] "comparing host" logger="cert-manager.acmesolver" host="example.com" path="/.well-known/acme-challenge/CJq38hxGhyAhn-XMk3hoSvO2H_VMtCje2v6jBkL_3Uo" base_path="/.well-known/acme-challenge" token="CJq38hxGhyAhn-XMk3hoSvO2H_VMtCje2v6jBkL_3Uo" expected_host="example.com"
cm-acme-http-solver-lv52m acmesolver I0315 14:33:11.679998       1 solver.go:91] "comparing token" logger="cert-manager.acmesolver" host="example.com" path="/.well-known/acme-challenge/CJq38hxGhyAhn-XMk3hoSvO2H_VMtCje2v6jBkL_3Uo" base_path="/.well-known/acme-challenge" token="CJq38hxGhyAhn-XMk3hoSvO2H_VMtCje2v6jBkL_3Uo" expected_token="CJq38hxGhyAhn-XMk3hoSvO2H_VMtCje2v6jBkL_3Uo"
cm-acme-http-solver-lv52m acmesolver I0315 14:33:11.680042       1 solver.go:99] "got successful challenge request, writing key" logger="cert-manager.acmesolver" host="example.com" path="/.well-known/acme-challenge/CJq38hxGhyAhn-XMk3hoSvO2H_VMtCje2v6jBkL_3Uo" base_path="/.well-known/acme-challenge" token="CJq38hxGhyAhn-XMk3hoSvO2H_VMtCje2v6jBkL_3Uo"

[zadjadr]

Had to disable ssl redirect in the ingress resource via:

metadata:
  annotations:
    haproxy.org/ssl-redirect: "false"

But its a bit weird that the redirect happened at all..