After delete and create all resources (deployment,service,ingress,secret…) many times, my web app can get let’s encrypt cert successfully.
Maybe because my web app is too old (nginx+php5.3)
Other (newer) apps in my k8s work just fine with let’s encrypt + nginx ingress.