Having name overrides for in-cluster services breaks ACME challenges, because the server tries to connect to the Service instead of the Ingress. To fix this, we need to configure both _cert-manager_ and _step-ca_ to *only* resolve names using the network-wide DNS server. |
||
---|---|---|
.. | ||
.gitignore | ||
cert-exporter.yaml | ||
certificates.yaml | ||
cluster-issuer.yaml | ||
dch-ca-issuer.yaml | ||
kustomization.yaml | ||
ssh_known_hosts |