Multi host ingress is using wrong certificate for single host

[mpskovvang]

We're using the Ingress resource to serve five different hosts. Each host has their own Google Managed Certificate.

All certificates are provided to the Ingress with the ingress.gcp.kubernetes.io/pre-shared-cert annotation.

The failing host is now serving the certificate of another host. The served certificate doesn't match the DNS.

Expected certificate: katoni.fr
Actual certificate: katoni.at

I'll try to delete and recreate the certificate now to hopefully trigger an Ingress update.

Let me know if I can gather any useful logs to troubleshoot the issue.

Kubernetes version: 1.14.10-gke.36

[mpskovvang]

The issue seems to be a human mistake. The failing host only included the registrable domain, not the www subdomain.

A new certificate is now provisioning.

I'll close the issue if this solves the problem.