ACME plugins aauto renewal not working | Error log "attempt to index local 'config' (a boolean value), context: ngx.timer"

[fardhana]

Hi everyone..

Problem

I have new setup of Kong hybrid mode and when i want to check the SSL renewal, i set renew_threshold_days to high number which is 88 day.
After that i figure out that my ACME plugins failed to renew the SSL. and when i try to manually trigger renewal using curl http://localhost:8001/acme -XPATCH i found below error on error.log file

2024/01/12 09:13:53 [error] 129281#0: *216056 [lua] job.lua:284: execute(): [timer-ng] failed to run timer unix_timestamp=1705050833510.000000;counter=167775:meta=@/usr/local/share/lua/5.1/kong/plugins/acme/api.lua:128:fn(): /usr/local/share/lua/5.1/kong/plugins/acme/client.lua:512: attempt to index local 'config' (a boolean value), context: ngx.timer

does anyone help me in this issue?

My KONG setup

• Kong version 3.5.0
• Mode hybrid

ACME setting

{
  "created_at": 1703085411,
  "updated_at": 1703929755,
  "name": "acme",
  "instance_name": "plugins-acme-global",
  "enabled": true,
  "service": null,
  "route": null,
  "id": "d8ecc715-e25f-4789-aa66-1ccf35fe355f",
  "tags": null,
  "protocols": [
    "grpc",
    "grpcs",
    "http",
    "https"
  ],
  "config": {
    "api_uri": "https://acme-v02.api.letsencrypt.org/directory",
    "account_email": "[email protected]",
    "renew_threshold_days": 89,
    "fail_backoff_minutes": 5,
    "storage_config": {
      "kong": {},
      "vault": {
        "token": null,
        "tls_server_name": null,
        "tls_verify": true,
        "auth_path": null,
        "https": false,
        "jwt_path": null,
        "auth_method": "token",
        "host": null,
        "auth_role": null,
        "timeout": null,
        "port": null,
        "kv_path": null
      },
      "consul": {
        "token": null,
        "host": null,
        "timeout": null,
        "kv_path": null,
        "port": null,
        "https": false
      },
      "redis": {
        "ssl_verify": false,
        "ssl_server_name": null,
        "namespace": "",
        "scan_count": 10,
        "database": null,
        "port": null,
        "host": null,
        "ssl": false,
        "auth": null
      },
      "shm": {
        "shm_name": "kong"
      }
    },
    "domains": [
      "xxxx.com"
    ],
    "storage": "kong",
    "account_key": null,
    "eab_kid": null,
    "eab_hmac_key": null,
    "preferred_chain": null,
    "cert_type": "rsa",
    "rsa_key_size": 4096,
    "tos_accepted": true,
    "enable_ipv4_common_name": true,
    "allow_any_domain": false
  },
  "consumer": null
}

[fffonion]

cc @bungle might related to the recent change of :configure handler

[fardhana]

does anyone know how to resolve this issue?
Thanks!

[fardhana]

Found this article. https://support.konghq.com/support/s/article/ACME-plugin-is-not-respecting-the-renew-threshold-days-when-in-Hybrid-mode
Currently kong storage for ACME plugins is not working in hybrid mode. thats why it suggested to use another storage. After i change storage config to redis, the issue was solved and renewal is works as expected.