title: Issuing certificate as Secret does not exist
body: <p>Below is the <code>describe</code> output for both my <code>clusterissuer</code> and <code>certificate</code> reource. I am brand new to cert-manager so not 100% sure this is set up properly - we need to use <code>http01</code> validation however we are not using an nginx controller. Right now we only have 2 microservices so the public-facing IP address simply belongs to a k8s service (type loadbalancer) which routes traffic to a pod where an <a href="https://cloud.google.com/endpoints/docs/openapi/specify-proxy-startup-options" rel="noreferrer">Extensible Service Proxy</a> container sits in front of the container running the application code. Using this set up I haven't been able to get anything beyond the errors below, however as I mentioned I'm brand new to cert-manager &amp; ESP so this could be configured incorrectly...</p>
  <pre><code>Name:         clusterissuer-dev
  Namespace:    
  Labels:       &lt;none&gt;
  Annotations:  kubectl.kubernetes.io/last-applied-configuration:
  API Version:  cert-manager.io/v1beta1
  Kind:         ClusterIssuer
  Metadata:
    Creation Timestamp:  2020-08-07T18:46:29Z
    Generation:          1
    Resource Version:    4550439
    Self Link:           /apis/cert-manager.io/v1beta1/clusterissuers/clusterissuer-dev
    UID:                 65933d87-1893-49af-b90e-172919a18534
  Spec:
    Acme:
      Email:  email@test.com
      Private Key Secret Ref:
        Name:  letsencrypt-dev
      Server:  https://acme-staging-v02.api.letsencrypt.org/directory
      Solvers:
        http01:
          Ingress:
            Class:  nginx
  Status:
    Acme:
      Last Registered Email:  email@test.com
      Uri:                    https://acme-staging-v02.api.letsencrypt.org/acme/acct/15057658
    Conditions:
      Last Transition Time:  2020-08-07T18:46:30Z
      Message:               The ACME account was registered with the ACME server
      Reason:                ACMEAccountRegistered
      Status:                True
      Type:                  Ready
  Events:                    &lt;none&gt;
  
  
  Name:         test-cert-default-ns
  Namespace:    default
  Labels:       &lt;none&gt;
  Annotations:  kubectl.kubernetes.io/last-applied-configuration:
  API Version:  cert-manager.io/v1beta1
  Kind:         Certificate
  Metadata:
    Creation Timestamp:  2020-08-10T15:05:31Z
    Generation:          2
    Resource Version:    5961064
    Self Link:           /apis/cert-manager.io/v1beta1/namespaces/default/certificates/test-cert-default-ns
    UID:                 259f62e0-b272-47d6-b70e-dbcb7b4ed21b
  Spec:
    Dns Names:
      dev.test.com
    Issuer Ref:
      Name:       clusterissuer-dev
    Secret Name:  clusterissuer-dev-tls
  Status:
    Conditions:
      Last Transition Time:        2020-08-10T15:05:31Z
      Message:                     Issuing certificate as Secret does not exist
      Reason:                      DoesNotExist
      Status:                      False
      Type:                        Ready
      Last Transition Time:        2020-08-10T15:05:31Z
      Message:                     Issuing certificate as Secret does not exist
      Reason:                      DoesNotExist
      Status:                      True
      Type:                        Issuing
    Next Private Key Secret Name:  test-cert-default-ns-rrl7j
  Events:
    Type    Reason     Age    From          Message
    ----    ------     ----   ----          -------
    Normal  Requested  2m51s  cert-manager  Created new CertificateRequest resource &quot;test-cert-default-ns-c4wxd&quot;
  </code></pre>
  <p>One last item - if I run the command <code>kubectl get certificate -o wide</code> I get the following output.</p>
  <pre><code>  NAME                           READY   SECRET                         ISSUER                     STATUS                                         AGE
    test-cert-default-ns           False   clusterissuer-dev-tls          clusterissuer-dev          Issuing certificate as Secret does not exist   2d23h
  </code></pre>