证书管理器letsencrypt颁发无效证书

Question

我遵循本教程使用NGINX Ingress控制器和带有letsencrypt的证书管理器来提供基本应用程序。

我可以访问该网站，但SSL证书坏了，上面写着Issued By: (STAGING) Artificial Apricot R3。

这是我的ClusterIssuer:

apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer
metadata:
name: letsencrypt-issuer
namespace: cert-manager
spec:
acme:
server: https://acme-staging-v02.api.letsencrypt.org/directory
email: [e-mail]
privateKeySecretRef:
name: letsencrypt-issuer
solvers:
- http01:
ingress:
class:  nginx

和Ingress:

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: my-app-ingress-dev
namespace: my-app
annotations:
cert-manager.io/cluster-issuer: letsencrypt-issuer
spec:
tls:
- secretName: echo-tls
hosts:
- my-app.example.com
rules:
- host: my-app.example.com
http:
paths:
- path: /
pathType: Prefix
backend:
service:
name: my-app-dev
port:
number: 80

Answer 1

LetsEncrypt暂存用于测试，不颁发浏览器信任的证书。使用生产LE URL而不是https://acme-v02.api.letsencrypt.org/directory