keramahos opened a new issue, #12470:
URL: https://github.com/apache/apisix/issues/12470

   ### Description
   
   As instructed, I am opening this issue. I am completely stuck and can't 
debug it. Due to lack of documentation, I was not able to apply Apisixtls 
(missing IngressClassName). So after figuring out this, I am experiencing this 
issue:
   - applying apisixTLS resource:
   ```
   apiVersion: apisix.apache.org/v2
   kind: ApisixTls
   metadata:
     name: apisix-tls9
     namespace: ingress-apisix
   spec:
     ingressClassName: apisix
     hosts:
       - "*.test.something.com"
     secret:
       name: nginx-default-ssl
       namespace: kube-system
   ```
   This is self-signed SSL. 
   I obtain a log:
   ```
   │ 2025-07-29T03:41:50.415Z    INFO    controllers.ApisixTls    
controller/apisixtls_controller.go:109    reconciling apisix tls    {"tls": 
"apisix-tls9"}        
    2025-07-29T03:41:50.434Z    INFO    status.updater    status/updater.go:113 
   received a status update    {"namespace": "ingress-apisix", "name": 
"apisix-tls9"}   
   ```
   with apisixTLS resource then being in state:
   ```
   │ Status:                                                                    
                                                                                
                            
   │   Conditions:                                                              
                                                                                
                            
   │     Last Transition Time:  2025-07-29T03:41:50Z                            
                                                                                
                            
   │     Message:               The apisix tls has been accepted and synced to 
APISIX                                                                          
                             
   │     Observed Generation:   1                                               
                                                                                
                            
   │     Reason:                Accepted                                        
                                                                                
                            
   │     Status:                True                                            
                                                                                
                            
   │     Type:                  Accepted                                        
                                                                                
                            
   │ Events:                    <none>
   ```
   afterwards, I do a curl to check ssls, but they are empty:
   `{"total":0,"list":[]}`
   
   I even can't debug it since everything seems to be correct - but 
certification is not added anyway.
   Connection to etcd is working,  I am able to add SSL cert through curl 
manually.
   There is already an nginx ingress running at the same time.
   
   Apisix is installed through helm:
   helm install apisix apisix/apisix --set 
apisix.admin.credentials.admin="1234" --set 
ingress-controller.config.apisix.adminKey="1234" --set apisix.ssl.enabled=true 
--set service.type=LoadBalancer   --set ingress-controller.enabled=true 
--namespace ingress-apisix --set 
ingress-controller.config.apisix.serviceNamespace=ingress-apisix --set 
apisix.wasm.enabled=false --set rbac.create=true 
   
   ### Environment
   
   - APISIX version (run `apisix version`): 
/usr/local/openresty//luajit/bin/luajit ./apisix/cli/apisix.lua version
   3.13.0
   - Operating system (run `uname -a`):
   - OpenResty / Nginx version (run `openresty -V` or `nginx -V`):
   - etcd version, if relevant (run `curl 
http://127.0.0.1:9090/v1/server_info`):
   - APISIX Dashboard version, if relevant:
   - Plugin runner version, for issues related to plugin runners:
   - LuaRocks version, for installation issues (run `luarocks --version`):
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscr...@apisix.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to