title: How do I test a ClusterIssuer solver?
body: <p>I'm attempting to deploy a Kubernetes cluster with an SSL certificate using LetsEncrypt on DigitalOcean. I followed <a href="https://www.digitalocean.com/community/tutorials/how-to-set-up-an-nginx-ingress-on-digitalocean-kubernetes-using-helm" rel="nofollow noreferrer">these instructions</a>, and everything works right up until the challenge order is created by the ClusterIssuer. Then I get this error:</p>
  
  <pre><code>cert-manager/controller/orders "msg"="Failed to determine the list of Challenge resources needed for the Order" "error"="no configured challenge solvers can be used for this challenge" "resource_kind"="Order" "resource_name"="letsencrypt-prod-cert-458163912-1173127706"
  </code></pre>
  
  <p>I've tried it both with http, and trying to configure DigitalOcean's <code>dns01</code> resolver, but neither work, and with a similar error. The site is live by ip, by dns name (though I get the no-ssl cert warning). This is the ClusterIssuer description:</p>
  
  <pre><code>Name:         letsencrypt-issuer
  Namespace:
  Labels:       app/instance=webapp
                app/managed-by=Tiller
                app/name=webapp
                app/version=0.1.0
                helm.sh/chart=webapp-0.1.0
  Annotations:  cert-manager.io/cluster-issuer: letsencrypt-issuer
                kubernetes.io/ingress.class: nginx
                kubernetes.io/tls-acme: true
  API Version:  cert-manager.io/v1alpha2
  Kind:         ClusterIssuer
  Metadata:
    Creation Timestamp:  2019-10-16T23:24:47Z
    Generation:          2
    Resource Version:    10300992
    Self Link:           /apis/cert-manager.io/v1alpha2/clusterissuers/letsencrypt-issuer
    UID:                 2ee08cd4-5781-4126-9e6d-6b9d108a1eb2
  Spec:
    Acme:
      Email:  &lt;redacted&gt;
      Private Key Secret Ref:
        Name:  letsencrypt-prod-cert
      Server:  https://acme-v02.api.letsencrypt.org/directory
  Status:
    Acme:
      Last Registered Email:  &lt;redacted&gt;
      Uri:                    https://acme-v02.api.letsencrypt.org/acme/acct/69503670
    Conditions:
      Last Transition Time:  2019-10-16T23:24:48Z
      Message:               The ACME account was registered with the ACME server
      Reason:                ACMEAccountRegistered
      Status:                True
      Type:                  Ready
  Events:                    &lt;none&gt;
  </code></pre>
  
  <p>Is there a way to see the solvers themselves to validate they're configured correctly? Is there a way to exercise them to prove they work? Is there some other way to diagnose what the situation is? I'm completely stuck, as there doesn't seem to be a lot of support online for this?</p>