DNS-01: "propagation check failed" err="NS ns-0.awsdns-00.com.:53 returned REFUSED for _acme-challenge.stage-keycloak.xxxx.com." logger="cert-manager.challenges" resource_name="stage-keycloak.xxxx-1647614373" resource_namespace="keycloak" resource_kind="Challenge" resource_version="v1" dnsName="stage-keycloak.xxxx.xxxx.com" #6874

eravindar12 · 2024-03-26T01:36:18Z

I've encountered an issue with the Route53 DNS01 resolver. Would you have any suggestions on how to resolve this problem?

Describe the bug:
"propagation check failed" err="NS ns-0.awsdns-00.com.:53 returned REFUSED for _acme-challenge.stage-keycloak.xxxx.xxxx.com." logger="cert-manager.challenges" resource_name="stage-keycloak.xxxx.xxxx-xxxx" resource_namespace="keycloak" resource_kind="Challenge" resource_version="v1" dnsName="stage-keycloak.xxxx.xxxx-xxxxx.com" type="DNS-01"

Environment details::

Kubernetes version: EKS 1.29
Cloud-provider/provisioner: Route53
cert-manager version: v1.14.4
Install method: e.g. helm/static manifests: Helm

/kind bug

jetstack-bot added the kind/bug Categorizes issue or PR as related to a bug. label Mar 26, 2024

inteon mentioned this issue Mar 27, 2024

error instantiating route53 challenge solver: unable to assume role: AccessDenied: User: arn:aws:sts::xxxxx:assumed-role/cert-manager/xxxx is not authorized to perform: sts:AssumeRole on resource: arn:aws:iam::9xxxxx:role/cert-manager #6872

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

eravindar12 commented Mar 26, 2024 •

edited

Comments

eravindar12 commented Mar 26, 2024 • edited

eravindar12 commented Mar 26, 2024 •

edited