From e8e6785e9aa22ea10c0b054b6bfb0a531f0c2185 Mon Sep 17 00:00:00 2001 From: James Munnelly Date: Mon, 9 Apr 2018 20:08:18 +0100 Subject: [PATCH] Immediately create a new order if old one has expired --- pkg/issuer/acme/prepare.go | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/pkg/issuer/acme/prepare.go b/pkg/issuer/acme/prepare.go index bfaa62d20..5ce9f9ecd 100644 --- a/pkg/issuer/acme/prepare.go +++ b/pkg/issuer/acme/prepare.go @@ -397,7 +397,10 @@ func (a *Acme) shouldAttemptValidation(ctx context.Context, cl client.Interface, case acme.StatusPending, acme.StatusProcessing, acme.StatusValid: // if the order has not failed, attempt authorization return 0, order, nil - case acme.StatusRevoked, acme.StatusInvalid, acme.StatusUnknown: + case acme.StatusRevoked, acme.StatusUnknown: + // if the order is revoked (i.e. expired), we should create a new one + return 0, nil, nil + case acme.StatusInvalid: // if the certificate is not marked as failed, we should set the // condition on the resource if !crt.HasCondition(v1alpha1.CertificateCondition{