<p>Hi I am using ambassador for ny project. I have 2 services and 2 host files. When I apply &quot;kubectl apply -f host1.yml&quot; and &quot;kubectl apply -f host2.yml&quot; I got below error:
How can I produce the correct TLS cert by using Ambassador edge stack 1.13 ? What is wrong here?</p>
<pre><code>kubectl get hosts -A
</code></pre>
<p><a href="https://i.stack.imgur.com/txQPN.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/txQPN.png" alt="enter image description here" /></a></p>
<p>Error: echo-host: continuing with invalid TLS secret tls2-cert</p>
<p>Details:</p>
<pre><code>2021-08-07 14:26:19 diagd 1.13.10-dev.24+g61366062d [P32TAEW] ERROR: Secret tls2-cert.default unknown
2021-08-07 14:26:19 diagd 1.13.10-dev.24+g61366062d [P32TAEW] ERROR: Host echo-host: continuing with invalid TLS secret tls2-cert
2021-08-07 14:26:19 diagd 1.13.10-dev.24+g61366062d [P32TAEW] ERROR: Secret tls-cert.default unknown
2021-08-07 14:26:19 diagd 1.13.10-dev.24+g61366062d [P32TAEW] ERROR: Host quote-host: continuing with invalid TLS secret tls-cert
2021-08-07 14:26:19 diagd 1.13.10-dev.24+g61366062d [P32TAEW] INFO: configuration updated (complete) from snapshot snapshot (S9 L1 G12 C5)
time=&quot;2021-08-07 14:26:19&quot; level=warning msg=&quot;license_secret_watch: empty decoded license data&quot; func=github.com/datawire/apro/cmd/amb-sidecar.runE.func3 file=&quot;github.com/datawire/apro/cmd/amb-sidecar/main.go:258&quot; CMD=amb-sidecar PID=16 THREAD=/license_secret_watch
time=&quot;2021-08-07T14:26:19Z&quot; level=info msg=&quot;Loaded file /ambassador/envoy/envoy.json&quot;
time=&quot;2021-08-07T14:26:19Z&quot; level=info msg=&quot;Saved snapshot v126&quot;
time=&quot;2021-08-07T14:26:19Z&quot; level=info msg=&quot;Pushing snapshot v126&quot;

</code></pre>
<p>My host files:</p>
<p><strong>host1.yml:</strong></p>
<pre><code>---
apiVersion: getambassador.io/v2
kind: Host
metadata:
  name: quote-host
spec:
  hostname: quote.kafkacake.xyz
  acmeProvider:
    email: yusufkaratoprak@gmail.com
  tlsSecret:
    name: tls-cert
  requestPolicy:
    insecure:
       action: Redirect
       additionalPort: 8080
</code></pre>
<p>host2.yml:</p>
<pre><code>---
apiVersion: getambassador.io/v2
kind: Host
metadata:
  name: echo-host
spec:
  hostname: echo.kafkacake.xyz
  acmeProvider:
    email: yusufkaratoprak@gmail.com
  tlsSecret:
    name: tls2-cert
  requestPolicy:
    insecure:
       action: Redirect
       additionalPort: 8080
</code></pre>
<p>How can I produce the correct TLS cert by using Ambassador edge stack 1.13 ?</p>

<p>You should try installing the <strong>Cert-manager</strong> with the <strong>ambassador</strong>. Edge stack supports the Let's encrypt in <code>acmeProvider</code> but only with one challenge <code>HTTP-01</code>.</p>
<p>Your <strong>HTTP-01</strong> cert-challenge is getting failed while cert-manager supports the <strong>DNS-01</strong> method also and if you want to use the wild card cert you can also use it.</p>
<p><a href="https://www.getambassador.io/docs/edge-stack/latest/howtos/cert-manager/" rel="nofollow noreferrer">https://www.getambassador.io/docs/edge-stack/latest/howtos/cert-manager/</a></p>
