Ugly Command Party - Day 3

Ugly Command Party - Day 3

On the 3rd of the ugly command party, the command I'll share is:

Ugly Command Name: Find Failed Certificate Requests and Identify Issues?

What does it do?

For users of #certmanager running in #kubernetes, this will fetch all unready certificate requests in a namespace and identify:

  • The certificate & certificate request name
  • The reasons why they are not ready
  • The approval status

When would you use it?

If you’re having troubles determining why your ingress object or application is not receiving a valid SSL certificate, this should quickly help identify where to look next. The message details typically include a helpful pointer to the root cause of the issue.

What is the command?

Please view the GitHub Gist below to find the code snippet. Due to a limitation with LinkedIn, it does not accept some code in the code snippet and breaks the Article feature :-/


What is some sample output?

---
CertificateRequest: failed-crt-ggvqv
Certificate: failed-crt
Issuer: letsencrypt-prds
Ready Status: False
Ready Message: Referenced "Issuer" not found: issuer.cert-manager.io "letsencrypt-prds" not found
Approved Status: True
Approved Message: Certificate request has been approved by cert-manager.io
---
CertificateRequest: failed-crt2-2k6tx
Certificate: failed-crt2
Issuer: letsencrypt-staging
Ready Status: False
Ready Message: Waiting on certificate issuance from order failed/failed-crt2-2k6tx-1415849869: "pending"
Approved Status: True
Approved Message: Certificate request has been approved by cert-manager.io        

What does it need?

  • kubectl
  • jq

I you want this command tailored for your environment and ready to copy & paste, this command has been added to the open source library of commands available through RunWhen Local. Check it out here: https://docs.runwhen.com/public/runwhen-local/getting-started/running-locally

Find an example of the command here: https://runwhen-local.sandbox.runwhen.com/failed/failed-SSL-Certificate-Health/#find-failed-certificate-requests-and-identify-issues

Have an ugly command to share? Collaborate with us on GitHub with issues or discussions


This is part of a series.?Check out?this article?to see additional ugly commands posted in the series.

要查看或添加评论,请登录

Shea Stewart的更多文章

  • Check for Available Helm Chart Updates

    Check for Available Helm Chart Updates

    Managing #helm Chart versions can be a bit of an interesting process..

    2 条评论
  • Reflections on 10 Days of Sharing Ugly Commands

    Reflections on 10 Days of Sharing Ugly Commands

    As someone who spends a lot of time with #kubernetes technology and users, I recently embarked on a 10-day journey to…

  • Ugly Command Party - Day 10

    Ugly Command Party - Day 10

    On the 10th of the ugly command party, the command I'll share is: Ugly Command Name: Find Ingress Owner and Service…

  • Ugly Command Party - Day 9

    Ugly Command Party - Day 9

    On the 9th of the ugly command party, the command I'll share is: Ugly Command Name: Check Missing or Risky…

  • Ugly Command Party - Day 8

    Ugly Command Party - Day 8

    On the 8th of the ugly command party, the command I'll share is: Ugly Command Name: List ImagePullBackOff Events and…

  • Ugly Command Party - Day 7

    Ugly Command Party - Day 7

    On the 7th of the ugly command party, the command I'll share is: Ugly Command Name: Test Service Account Access to…

  • Ugly Command Party - Day 6

    Ugly Command Party - Day 6

    Ugly Command Name: Check for RWO Persistent Volume Node Attachment Issues What does it do? Searches through a namespace…

  • Ugly Command Party Day 5

    Ugly Command Party Day 5

    On the 5th of the ugly command party, the command I'll share is: Ugly Command Name: List Images and Tags for Every…

  • Ugly Command Party - Day 4

    Ugly Command Party - Day 4

    On the 4th of the ugly command party, the command I'll share is: Ugly Command Name: Fetch Ingress Object Health in…

  • Ugly Command Party - Day 2

    Ugly Command Party - Day 2

    On the second day of the ugly command party, the command I'll share is: Ugly Command Name: Troubleshoot Unready…

社区洞察

其他会员也浏览了