PREQUEL-2025-0104

Ingress Nginx can't obtain X.509 certificateMedium

Impact: 5/10

Mitigation: 4/10

PREQUEL-2025-0104View on GitHub

KubernetesCertificateNginxIngress

Description

The Nginx ingress encountered an error while trying to obtain an X.509 certificate from the Kubernetes secret.

Cause

• The specified certificate secret does not exist in the Kubernetes Control Plane.
• The certificate has been deleted or is no longer available.
• The ingress controller does not have the necessary permissions to read the certificate.

Mitigation

• Verify that the certificate secret key exists in the Kubernetes Control Plane.
• Check the ingress controller's permissions to access the certificate.

References

• https://kubernetes.io/docs/concepts/configuration/secret/
• https://kubernetes.io/docs/concepts/services-networking/ingress/