Getting error when using cert-manager on GKE Getting error when using cert-manager on GKE kubernetes kubernetes

Getting error when using cert-manager on GKE


First make sure you when through the cert-manager troubleshooting page:

https://docs.cert-manager.io/en/latest/getting-started/troubleshooting.html

Since you mention you're using GKE (so there is a change that you're a GKE private cluster) I would suggest that you also take a look at this:

http://docs.cert-manager.io/en/latest/getting-started/webhook.html#running-on-private-gke-clusters

In my case I had to create a firewall rule to allow traffic from master nodes to the private instances. This is the command I had to run:

gcloud compute firewall-rules create allow-connect-cert-manager-webhook \ --action ALLOW \ --direction INGRESS \ --source-ranges 172.16.0.0/28 \ --rules tcp:6443 \ --target-tags gke-platform-staging-5d5216f8-node --network platform-staging-vpc-network

The --network parameter is crucial and it must target the network that's being used by your cluster.