<p>I've setup cert mananger on microk8s following <a href="https://cert-manager.io/docs/installation/kubernetes/" rel="nofollow noreferrer">these</a> instructions, I had it working 6 months ago but have since had to start again from scratch. Now when I setup my Cluster Issuer I'm getting the error below.</p>
<p>Everything else seems fine and in a good state. I'm struggling to know where to start debugging this.</p>
<pre><code>Error initializing issuer: Get &quot;https://acme-v02.api.letsencrypt.org/directory&quot;: remote error: tls: handshake failure
</code></pre>
<p>Cluster Issuer yaml</p>
<pre><code>apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-prod
spec:
  acme:
    email: &lt;myemail&gt;
    server: https://acme-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: prod-issuer-account-key
    solvers:
    - http01:
        ingress:
          class: nginx
</code></pre>
<p><strong>UPDATE</strong>
Some extra info</p>
<p>All pods for cert manager are running, here are the logs</p>
<p>cert-manager pod <a href="https://pastebin.com/aT5jAVbt" rel="nofollow noreferrer">logs</a>
cert-manager-cainjector logs only shows some warnings about deprecated apis
cert-mananger-webhook <a href="https://pastebin.com/9jbFjdtY" rel="nofollow noreferrer">logs</a></p>
<p><a href="https://pastebin.com/V59FdgaK" rel="nofollow noreferrer">Describe ClusterIssuer</a></p>
<p>I've tried to get a cert for an ingress resource but it errors saying the cluster issuer isn't in a ready state</p>

matt_lethargic
<p>After uninstalling and reinstalling everything including Microk8s I tried again no luck. Then I tried using the latest helm chart v1.0.2 which had a newer cert-manager version, seemed to work straight away.</p>
<p>Another note, mainly to myself. This issue was also caused by having search domains setup in netplan, once removed everything started working.</p>
