Waiting for HTTP-01 challenge propagation: failed to perform self check GET request

[itssadon]

Waiting for HTTP-01 challenge propagation: failed to perform self check GET request

[itssadon]

The issue is with an incompatibility with DO’s loadBalancer and the way k8s works.

The workaround is:

• create a dedicated DNS entry pointing to the public IP of your load balancer (checking for EXTERNAL-IP via `kubectl get svc -n ingress-nginx), eg. kube.mydomain.com
• In the manifest used to create your load balancer, add an annotation pointing to that newly created DNS entry, like described in the DO doc.

annotations: 
    service.beta.kubernetes.io/do-loadbalancer-hostname: "kube.mydomain.com"

Final nginx values file should look similar to the below:

...
  service:
    type: LoadBalancer
    annotations:
      # Enable proxy protocol
      service.beta.kubernetes.io/do-loadbalancer-enable-proxy-protocol: "true"
      # Specify whether the DigitalOcean Load Balancer should pass encrypted data to backend droplets
      service.beta.kubernetes.io/do-loadbalancer-tls-passthrough: "true"
      # Specify an annotation pointing to that newly created DNS entry
      service.beta.kubernetes.io/do-loadbalancer-hostname: "kube.mydomain.com" # <--- here

More info here