letsencrypt-prod results in "Fake Certificate"

[Lapotor]

I tried to create a Let's Encrypt SSL Certificate for prod but it results in a Kubernetes Ingress Controller Fake Certificate

Did I something wrong to generate a valid ssl cert?

My Annotations:

kubernetes.io/ingress.class: nginx
cert-manager.io/cluster-issuer: "letsencrypt-prod"
kubernetes.io/tls-acme: "true"

kubeone.yaml

apiVersion: kubeone.k8c.io/v1beta2
kind: KubeOneCluster
versions:
  kubernetes: '1.24.3'
cloudProvider:
  hetzner: {}
  external: true
addons:
  enable: true
  addons:
  - name: cluster-autoscaler

$ kubectl get nodes -o wide
NAME                            STATUS   ROLES           AGE   VERSION   INTERNAL-IP   EXTERNAL-IP     OS-IMAGE             KERNEL-VERSION      CONTAINER-RUNTIME
<name>-control-plane-1         Ready    control-plane   16d   v1.24.3   <Internal-IP> <External-IP>    Ubuntu 20.04.5 LTS   5.4.0-125-generic   containerd://1.6.9
<name>-control-plane-2         Ready    control-plane   16d   v1.24.3   <Internal-IP> <External-IP>    Ubuntu 20.04.5 LTS   5.4.0-125-generic   containerd://1.6.9
<name>-pool1-79ddf6f4c-4cwdm   Ready    <none>          16d   v1.24.3   <Internal-IP> <External-IP>    Ubuntu 20.04.5 LTS   5.4.0-125-generic   containerd://1.6.9

$ kubectl get pods -n kube-system
NAME                                                READY   STATUS    RESTARTS   AGE
calico-kube-controllers-77559f8ddc-789jv            1/1     Running   0          16d
canal-25rrz                                         2/2     Running   0          16d
canal-nv444                                         2/2     Running   0          16d
canal-zf4lg                                         2/2     Running   0          16d
cluster-autoscaler-c9b79c6dd-xjxsp                  1/1     Running   0          16d
coredns-56fc8c7fff-b9x9b                            1/1     Running   0          16d
coredns-56fc8c7fff-smv7j                            1/1     Running   0          16d
etcd-jbm-k8s-control-plane-1                        1/1     Running   0          16d
etcd-jbm-k8s-control-plane-2                        1/1     Running   0          16d
hcloud-cloud-controller-manager-65c55df974-fhxgb    1/1     Running   0          16d
hcloud-csi-controller-0                             5/5     Running   0          16d
hcloud-csi-node-8dhvg                               3/3     Running   0          16d
hcloud-csi-node-8wt4m                               3/3     Running   0          16d
hcloud-csi-node-w6kh4                               3/3     Running   0          16d
kube-apiserver-jbm-k8s-control-plane-1              1/1     Running   1          16d
kube-apiserver-jbm-k8s-control-plane-2              1/1     Running   0          16d
kube-controller-manager-jbm-k8s-control-plane-1     1/1     Running   0          16d
kube-controller-manager-jbm-k8s-control-plane-2     1/1     Running   0          16d
kube-proxy-89rhn                                    1/1     Running   0          16d
kube-proxy-8f9xl                                    1/1     Running   0          16d
kube-proxy-gbql9                                    1/1     Running   0          16d
kube-scheduler-jbm-k8s-control-plane-1              1/1     Running   0          16d
kube-scheduler-jbm-k8s-control-plane-2              1/1     Running   0          16d
machine-controller-7f45dcdcdf-jzpfj                 1/1     Running   0          16d
machine-controller-webhook-59d8bfbdcc-hd5tz         1/1     Running   0          16d
metrics-server-6c8f44fb59-72cj5                     1/1     Running   0          16d
node-local-dns-bstrd                                1/1     Running   0          16d
node-local-dns-khdjs                                1/1     Running   0          16d
node-local-dns-vzbr4                                1/1     Running   0          16d
operating-system-manager-d568ddc9-5bwdn             1/1     Running   0          16d
operating-system-manager-webhook-85f547c74b-6rckj   1/1     Running   0          16d

[embik]

Hey @Lapotor, can you please specify what kind of help you are looking for? It seems that you are trying to use cert-manager and nginx-ingress and are having issues with them but neither are part of KubeOne.

Is this a KKP setup which should be discussed at kubermatic/kubermatic?