<p>i am hiting the issue resolver cannot be found, and read all the related topics, but got no answer</p>
<p><strong>ENV:</strong></p>
<ul>
<li>kubernetes v1.20.6</li>
<li>traefik: 2.4.9</li>
</ul>
<p>Traefik is beeing installed with <code>helm</code> chart. The <code>values.yaml</code> looks like:</p>
<pre class="lang-yaml prettyprint-override"><code>image:
  name: traefik

globalArguments: # tried with &quot;globalArguments&quot; and &quot;additionalArguments&quot;
  - &quot;--api.insecure=true&quot;
  - &quot;--accesslog=false&quot;
  - &quot;--log.level=DEBUG&quot;
  - &quot;--certificatesresolvers.inwx.acme.email=*****@example.com&quot;
  - &quot;--certificatesresolvers.inwx.acme.caServer=https://acme-staging-v02.api.letsencrypt.org/directory&quot;
  - &quot;--certificatesresolvers.inwx.acme.dnschallenge=true&quot;
  - &quot;--certificatesresolvers.inwx.acme.dnschallenge.provider=inwx&quot;
  - &quot;--certificatesresolvers.inwx.acme.storage=/data/acme.json&quot;

ingressRoute:
  dashboard:
    enabled: true
    insecure: true
  api:
    insecure: true

persistence:
  enabled: true
  accessMode: ReadWriteOnce
  size: 128Mi
  path: /data
  annotations: {}

env:
  - name: INWX_USERNAME
    valueFrom:
      secretKeyRef:
        name: inwx-dns
        key: INWX_USERNAME
  - name: INWX_PASSWORD
    valueFrom:
      secretKeyRef:
        name: inwx-dns
        key: INWX_PASSWORD

rbac:
  enabled: true
  namespaced: false

ports:
  traefik:
    port: 9000
    expose: true
</code></pre>
<p><strong>result:</strong>
an empty <code>acme.json</code> was created at the desired location but taefik print:</p>
<pre><code>the router flweber-whoami-ingress-flweber-test-foo-example-de-flweber-whoami@kubernetes uses a non-existent resolver: inwx
</code></pre>
<p><strong>Ingress Definition:</strong></p>
<pre><code>apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: flweber-whoami-ingress
  namespace: flweber-test
  annotations:
    kubernetes.io/ingress.class: traefik
    traefik.ingress.kubernetes.io/router.entrypoints: websecure
    traefik.ingress.kubernetes.io/router.tls: &quot;true&quot;
    traefik.ingress.kubernetes.io/router.tls.certresolver: &quot;inwx&quot;
    traefik.ingress.kubernetes.io/router.middlewares: flweber-test-flweber-stripprefix@kubernetescrd
spec:
  rules:
    - host: foo.example.de
      http:
        paths:
          - path: /flweber-whoami
            pathType: Prefix
            backend:
              service:
                name: flweber-whoami
                port:
                  number: 80
</code></pre>
<p>thanks in advance</p>
<p><strong>Note:</strong> I had to replace all domains with placeholders. I'm not using example.com or example.de in the real configuration</p>

Florian Weber
<p>For all who have a similar problem, check your debug logs very well.
In my case between all the debug output was this line:</p>
<pre><code>time=&quot;2021-07-26T09:56:43Z&quot; level=error msg=&quot;The ACME resolver \&quot;inwx\&quot; is skipped from the resolvers list because: unable to get ACME account: permissions 660 for /data/acme.json are too open, please use 600&quot;
</code></pre>
<p>The first time traefik starts all was fine but if i had done a <code>helm upgrade</code> i get the log above.</p>
<p>I could fix it with an init container which sets the permissions correctly.</p>
<p>Following section i added to my values.yaml:</p>
<pre><code>deployment:
  initContainers:
    - name: volume-permissions
      image: busybox:1.31.1
      command: [&quot;sh&quot;, &quot;-c&quot;, &quot;chmod -Rv 600 /data/*&quot;]
      volumeMounts:
        - name: data
          mountPath: /data
</code></pre>
<p>If your interested if there is a better solution i also opened a discussion in traefik's forum at this link: <a href="https://community.traefik.io/t/traefik2-4-uses-a-non-existent-resolver-inwx/11283/3" rel="nofollow noreferrer">https://community.traefik.io/t/traefik2-4-uses-a-non-existent-resolver-inwx/11283/3</a></p>
<p>Hope i could help someone :)</p>
