Why does the Ingress status show an ESSEF error?
Virtual Private Cloud Classic infrastructure Satellite
When you check the status of your cluster's Ingress components by running the ibmcloud ks ingress status-report get
command, you see an error similar to the following example.
The Opaque secret field expired or will expire soon (ESSEF).
You have secrets in your cluster that have fields which are either expired or are about to expire in the next 5 days.
Review the secrets in your cluster and update or remove them.
-
List your secrets.
ibmcloud ks ingress secret ls
-
Complete the steps depending on whether the secret fields are still needed or not. If the expiring secret field in the secret is still needed, ensure the corresponding secret in the IBM Cloud Secrets Manager instance has been updated and has a new expiry date. Then, update the secret field with the new values from IBM Cloud Secrets Manager by running the following command.
To view all the secrets in your IBM Cloud Secrets Manager instance, see Accessing Secrets.
ibmcloud ks ingress secret update
-
If the secret in the secret field is expiring because it is no longer needed, run the
ibmcloud ks ingress secret field rm
command to remove it. -
If the issue persists, contact support. Open a support case. In the case details, be sure to include any relevant log files, error messages, or command outputs.