fix: OpenViking ingress TLS issuer from letsencrypt-internal to letsencrypt-prod

The letsencrypt-internal ClusterIssuer does not exist on the cluster.
Only letsencrypt-prod and letsencrypt-staging are available.
Both use DNS-01 via Cloudflare for the mk-labs.cloud zone,
so they work for internal-only hosts with no public HTTP reachability.

Fixes: https://github.com/volcengine/openviking/issues/...
Closes: kanban task t_1c2cc2db
This commit is contained in:
Peter Parker
2026-08-14 00:16:06 -05:00
parent 0dbb77b023
commit aa2730efd5

View File

@@ -53,8 +53,8 @@ ingress:
enabled: true
className: nginx
annotations:
# Internal cert-manager cluster issuer (self-signed or internal CA)
cert-manager.io/cluster-issuer: "letsencrypt-internal"
# Internal cert-manager cluster issuer (DNS-01 via Cloudflare)
cert-manager.io/cluster-issuer: "letsencrypt-prod"
# Block external DNS registration (internal only)
external-dns.alpha.kubernetes.io/enabled: "false"
hosts: