Venafi TPP - Timeout while initialising the Issuer

[dondsouza]

Context:

I am trying to integrate istio service mesh with the Venafi TPP using cert-manager.

Issue:

cert-manager issuer initializing is failing with a "context deadline exceeded (Client.Timeout exceeded while awaiting headers)" error.

Versions:

cert-manager version: 1.9
Kubernetes version: 1.21
cloud provider: AWS

Logs from the cert-manager pod. (URL is redacted)

I1006 20:31:56.160598       1 instrumentedvenaficlient.go:75] cert-manager/venafi "msg"="calling Ping"
E1006 20:32:26.161740       1 setup.go:35] cert-manager/venafi "msg"="Failed to setup Venafi issuer" "error"="error pinging Venafi API: Get \https://redacted-venafi-url/vedsdk/\: context deadline exceeded (Client.Timeout exceeded while awaiting headers)"
I1006 20:32:26.161793       1 sync.go:62] cert-manager/issuers "msg"="Error initializing issuer: Failed to setup Venafi issuer: error pinging Venafi API: Get \https://redacted-venafi-url/vedsdk/\: context deadline exceeded (Client.Timeout exceeded while awaiting headers)" "resource_kind"="Issuer" "resource_name"="tpp-issuer" "resource_namespace"="c1-a-ns" "resource_version"="v1"

Logs from cmctl showing the version

$ cmctl version
Client Version: util.Version{GitVersion:"v1.9.1", GitCommit:"4486c01f726f17d2790a8a563ae6bc6e98465505", GitTreeState:"", GoVersion:"go1.18.3", Compiler:"gc", Platform:"windows/amd64"}
Server Version: &versionchecker.Version{Detected:"v1.9.0", Sources:map[string]string{"crdLabelVersion":"v1.9.0"}}

Issuer yaml:

apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: tpp-issuer
  namespace: c1-a-ns
spec:
  venafi:
    zone: \VED\Policy\Automation\<Redacted>\"
    tpp:
      url: https://<redacted-venafi-url>/vedsdk
      caBundle: <redacted>
      credentialsRef:
        name: tpp-secret

I was meaning to raise a bug but thought it's better to check with the community first. Can anyone help out here?