fix: OpenViking ingress TLS issuer from letsencrypt-internal to letsencrypt-prod
The letsencrypt-internal ClusterIssuer does not exist on the cluster. Only letsencrypt-prod and letsencrypt-staging are available. Both use DNS-01 via Cloudflare for the mk-labs.cloud zone, so they work for internal-only hosts with no public HTTP reachability. Fixes: https://github.com/volcengine/openviking/issues/... Closes: kanban task t_1c2cc2db
This commit is contained in:
@@ -53,8 +53,8 @@ ingress:
|
||||
enabled: true
|
||||
className: nginx
|
||||
annotations:
|
||||
# Internal cert-manager cluster issuer (self-signed or internal CA)
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-internal"
|
||||
# Internal cert-manager cluster issuer (DNS-01 via Cloudflare)
|
||||
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
||||
# Block external DNS registration (internal only)
|
||||
external-dns.alpha.kubernetes.io/enabled: "false"
|
||||
hosts:
|
||||
|
||||
Reference in New Issue
Block a user