# Letsencrypt Certificates not Updating **URL:** \ **Category:** SUSE Rancher Prime\ **Created:** [May 26, 2020, 9:38pm UTC](https://forums.suse.com/t/letsencrypt-certificates-not-updating/17549 "2020-05-26T21:38:21Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![cjohn001](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/cjohn001/32/5702_2.png) [@cjohn001](https://forums.suse.com/u/cjohn001)\ **Post date:** [May 26, 2020, 9:38pm UTC](https://forums.suse.com/t/letsencrypt-certificates-not-updating/17549/1 "2020-05-26T21:38:21Z")
Hello together, I just realized that my certificates from letsencrypt are not updating anymore. Can someone explain me how I can force letsencrypt to update all certifcates in my cluster and how I could debug things that fail? Thanks a lot for your help. Best regards, Christoph I am currently running cert-manager 0.11.0. kc get certificate --all-namespaces -o custom-columns=“NAMESPACE:.metdata.namespace,NAME:.metadata.name,OWNER:.metadata.ownerReferences[0].kind,OLD FORMAT:.spec.acme” NAMESPACE NAME OWNER OLD FORMAT my-nutri-diary.de-crt Ingress www.my-nutri-diary.de-crt Ingress dev-my-nutri-diary-crt Ingress dev.my-nutri-diary-crt Ingress dev-my-nutri-diary-crt Ingress dev-my-nutri-diary-crt Ingress gitlab-tls-crt Ingress minio-tls-crt Ingress registry-tls-crt Ingress prod.my-nutri-diary-crt Ingress prod-my-nutri-diary-crt Ingress prod-my-nutri-diary-crt Ingress staging.my-nutri-diary-crt Ingress staging-my-nutri-diary-crt Ingress staging-my-nutri-diary-crt Ingress I had a look into the logs of cert-manager. I got lots of error of the following kind. Can someone tell what these errors mean and what might go wrong here? E0526 21:48:59.272036 1 sync.go:184] cert-manager/controller/challenges “msg”=“propagation check failed” “error”=“wrong status code ‘503’, expected ‘200’” “dnsName”=“[gitlab.my-nutri-diary.de](http://gitlab.my-nutri-diary.de)” “resource\_kind”=“Challenge” “resource\_name”=“gitlab-tls-crt-3702062889-1085796334-810123510” “resource\_namespace”=“gitlab” “type”=“http-01” 26.5.2020 23:48:59 I0526 21:48:59.272104 1 controller.go:135] cert-manager/controller/challenges “level”=0 “msg”=“finished processing work item” “key”=“gitlab/gitlab-tls-crt-3702062889-1085796334-810123510” 26.5.2020 23:48:59 I0526 21:48:59.324791 1 controller.go:129] cert-manager/controller/challenges “level”=0 “msg”=“syncing item” “key”=“staging-nginx/staging-my-nutri-diary-crt-603438673-3589057284-2184142743” 26.5.2020 23:48:59 I0526 21:48:59.325186 1 pod.go:58] cert-manager/controller/challenges/http01/selfCheck/http01/ensurePod “level”=0 “msg”=“found one existing HTTP01 solver pod” “dnsName”=“[staging.my-nutri-diary.de](http://staging.my-nutri-diary.de)” “related\_resource\_kind”=“Pod” “related\_resource\_name”=“cm-acme-http-solver-vn64d” “related\_resource\_namespace”=“staging-nginx” “resource\_kind”=“Challenge” “resource\_name”=“staging-my-nutri-diary-crt-603438673-3589057284-2184142743” “resource\_namespace”=“staging-nginx” “type”=“http-01” 26.5.2020 23:48:59 I0526 21:48:59.325282 1 service.go:43] cert-manager/controller/challenges/http01/selfCheck/http01/ensureService “level”=0 “msg”=“found one existing HTTP01 solver Service for challenge resource” “dnsName”=“[staging.my-nutri-diary.de](http://staging.my-nutri-diary.de)” “related\_resource\_kind”=“Service” “related\_resource\_name”=“cm-acme-http-solver-nfmdx” “related\_resource\_namespace”=“staging-nginx” “resource\_kind”=“Challenge” “resource\_name”=“staging-my-nutri-diary-crt-603438673-3589057284-2184142743” “resource\_namespace”=“staging-nginx” “type”=“http-01” ---
**Author:** ![superseb](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/superseb/32/2424_2.png) [@superseb](https://forums.suse.com/u/superseb)\ **Post date:** [May 27, 2020, 7:47am UTC](https://forums.suse.com/t/letsencrypt-certificates-not-updating/17549/2 "2020-05-27T07:47:06Z")
Can you check [https://gitlab.com/gitlab-org/gitlab/-/issues/194355](https://gitlab.com/gitlab-org/gitlab/-/issues/194355) / [https://github.com/jetstack/cert-manager/issues/2442](https://github.com/jetstack/cert-manager/issues/2442) ? ---
**Author:** ![cjohn001](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/cjohn001/32/5702_2.png) [@cjohn001](https://forums.suse.com/u/cjohn001)\ **Post date:** [May 29, 2020, 8:49pm UTC](https://forums.suse.com/t/letsencrypt-certificates-not-updating/17549/3 "2020-05-29T20:49:31Z")
Hello @superseb, thanks for the link, I am not sure if this is my problem as all of my certificates are not updated anymore. It is not the gitlab one alone. It might be that I have broken something when I upgraded my cert-manager from version 7 to version 11 a while ago. I am now going to try to completely remove cert-manager and reinstall it again. As I have never done this before and as I am not very familiar with kubernetes yet, I have a question where you might be able to help me with. I would like to install the most recent cert-manager version but would like to keep all my certificate resources which are currently installed in the cluster. Can I simply backup the resources like described here: [Backup and Restore Resources - cert-manager Documentation](https://cert-manager.io/docs/tutorials/backup/) than remove cert-manager, install the latest version, and restore the backup of the resources like described in the link, or will this not work and I will break things as the resources were created against the old cert-manager version? Unfortunately, I have not found any descriptions yet that explain how to uninstall and reinstall cert-manager when an installation broke. The docs only described how to do upgrades of a correctly working installation. Are you aware of a description regarding what I am going to try which might help me to do things right ? Thanks for your help! Best regards, Christoph > [@superseb](#): > > [Cert-Manager: Propagation check failed, wrong service used by cm-acme-http-solver (#194355) · Issues · GitLab.org / GitLab · GitLab](https://gitlab.com/gitlab-org/gitlab/-/issues/194355) ---
**Author:** ![cjohn001](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/cjohn001/32/5702_2.png) [@cjohn001](https://forums.suse.com/u/cjohn001)\ **Post date:** [May 29, 2020, 10:54pm UTC](https://forums.suse.com/t/letsencrypt-certificates-not-updating/17549/4 "2020-05-29T22:54:10Z")
@suberseb, thanks once again for your support. I now upgraded cert-manager to version 0.15.0. This solved my problems. cert-manager started updating my certs again 🙂