<p>Hello I m struggling to get the Cert-Manager work with let'sencrypt on my Azure AKS to secure and asp.net core web app.</p>

<p>I have a ClusterIssuer like that:</p>

<pre><code>apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer
metadata:
  name: letsencryptstaging-issuer
spec:
  acme:
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    email: letsencryptstaging@prodibi.com
    privateKeySecretRef:
      name: letsencryptstaging-secret
    solvers:
    - http01:
        ingress:
          class: nginx
</code></pre>

<p>and I request a certificate like that:</p>

<pre><code>apiVersion: cert-manager.io/v1alpha2
kind: Certificate
metadata:
  name: aks-prodibiv2-com-staging
spec:
  secretName: aks-prodibiv2-com-staging-secret
  duration: 2160h
  renewBefore: 480h
  organization:
  - prodibiv2
  dnsNames:
  - aks.prodibiv2.com
  issuerRef:
    name: letsencryptstaging-issuer
    kind: ClusterIssuer
</code></pre>

<p>I also have added the annotations to the ingress controller I would like to use</p>

<pre><code>certmanager.k8s.io/acme-challenge-type: http01
certmanager.k8s.io/cluster-issuer: letsencryptstaging-issuer
</code></pre>

<p>In the following screenshot we can see that the certificate request is "Waiting to complete"
We can see also that we have two ingress controller and the one for the challenge seems to not have an IP, and the domain is pointing to the ingress-prodibiweb</p>

<p>if I try to put the domain in front of the .well-known path I get a 404 not found error.</p>

<p>So my guess is that the cert-manager is not configured properly to use the ingress-prodibiweb (that point to asp.net core webapp) or something like that. Any idea on what can I try to get it working?</p>

<p><a href="https://i.stack.imgur.com/Ao18M.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Ao18M.png" alt="Screenshot of the certificate state and the ingresses descriptions"></a></p>

fred_
<ol>
<li>Your ingress ip is private. No way for Let's encrypt to access.</li>
<li>You need to make sure you are using Nginx Ingress which you are using</li>
</ol>

<pre><code>    - http01:
        ingress:
          class: nginx
</code></pre>

<ol start="3">
<li>Make sure your domain is point to right IP. (Ingress IP and also a Load Balancer IP)
Now is 20.50.42.93
<a href="https://mxtoolbox.com/SuperTool.aspx?action=a%3aaks.prodibiv2.com&amp;run=toolpage" rel="nofollow noreferrer">https://mxtoolbox.com/SuperTool.aspx?action=a%3aaks.prodibiv2.com&amp;run=toolpage</a></li>
</ol>

<p>And <a href="https://cert-manager.io/docs/configuration/acme/dns01/azuredns/" rel="nofollow noreferrer">dns01</a> also a solution to request SSL. You can give it a try if you have enough permissions.</p>
