Mastodon 🐘

Yorgos SaslisIt is now already Tuesday morning but everything is back online.✅ <a href="https://chaos.social/tags/Pihole" class="mention hashtag" rel="nofollow noopener" target="_blank">#Pihole</a> is back up so <a href="https://chaos.social/tags/DNS" class="mention hashtag" rel="nofollow noopener" target="_blank">#DNS</a> resolution works again and the rest of the family can use the internet! ✅ NFS provisioners can provide persistent volumes, ✅ <a href="https://chaos.social/tags/CertManager" class="mention hashtag" rel="nofollow noopener" target="_blank">#CertManager</a> issues HTTPS certificates, ✅ <a href="https://chaos.social/tags/Unifi" class="mention hashtag" rel="nofollow noopener" target="_blank">#Unifi</a> controller is back up to allow me to actually make changes to my network config (such as, say, change DNS settings when pihole is down... ) ✅ <a href="https://chaos.social/tags/HomeAssistant" class="mention hashtag" rel="nofollow noopener" target="_blank">#HomeAssistant</a> automates away, ✅ <a href="https://chaos.social/tags/Nextcloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#Nextcloud</a> is seeing sunnier days, ✅ <a href="https://chaos.social/tags/Photoprism" class="mention hashtag" rel="nofollow noopener" target="_blank">#Photoprism</a> <3

Yorgos SaslisWhen <a href="https://chaos.social/tags/certManager" class="mention hashtag" rel="nofollow noopener" target="_blank">#certManager</a> works, it's beautiful. It'd been working smoothly for YEARS without me needing to touch it. Getting it to work though... !?Well, let's just I'd forgotten how much "fun" that can be.

IndiealexhI spent probably a weeks worth of hours learning more <a href="https://tny.social/tags/kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#kubernetes</a> so I could save $60 a month.I have a nice 3 node kube cluster with a 2 node <a href="https://tny.social/tags/keepalived" class="mention hashtag" rel="nofollow noopener" target="_blank">#keepalived</a> <a href="https://tny.social/tags/haproxy" class="mention hashtag" rel="nofollow noopener" target="_blank">#haproxy</a> TCP load balancer. All on <a href="https://tny.social/tags/ARM" class="mention hashtag" rel="nofollow noopener" target="_blank">#ARM</a> VPS.Haproxy ingress <a href="https://tny.social/tags/ExternalDNS" class="mention hashtag" rel="nofollow noopener" target="_blank">#ExternalDNS</a> operator <a href="https://tny.social/tags/CertManager" class="mention hashtag" rel="nofollow noopener" target="_blank">#CertManager</a> <a href="https://tny.social/tags/RookCeph" class="mention hashtag" rel="nofollow noopener" target="_blank">#RookCeph</a> <a href="https://tny.social/tags/ArgoCD" class="mention hashtag" rel="nofollow noopener" target="_blank">#ArgoCD</a> <a href="https://tny.social/tags/KeyCloak" class="mention hashtag" rel="nofollow noopener" target="_blank">#KeyCloak</a> <a href="https://tny.social/tags/ValKey" class="mention hashtag" rel="nofollow noopener" target="_blank">#ValKey</a> <a href="https://tny.social/tags/Mastodon" class="mention hashtag" rel="nofollow noopener" target="_blank">#Mastodon</a> <a href="https://tny.social/tags/CloudNativePG" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudNativePG</a> <a href="https://tny.social/tags/Postgresql" class="mention hashtag" rel="nofollow noopener" target="_blank">#Postgresql</a>

Harald KlinkeopenDesk läuft ausschließlich auf Kubernetes und nutzt über 35 Helm-Charts für den produktiven Betrieb. Voraussetzungen: K8s >=1.24, Ingress-NGINX, cert-manager, Helm, Helmfile, RWO-Volumes & externe Dienste wie Redis, Postfix & Co. Details: <a href="https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/-/blob/develop/docs/requirements.md" rel="nofollow noopener" translate="no" target="_blank">https://gitlab.opencode.de/bmi/opendesk/deployment/opendesk/-/blob/develop/docs/requirements.md</a> <a href="https://det.social/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> <a href="https://det.social/tags/Helm" class="mention hashtag" rel="nofollow noopener" target="_blank">#Helm</a> <a href="https://det.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a> <a href="https://det.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSource</a> <a href="https://det.social/tags/openDesk" class="mention hashtag" rel="nofollow noopener" target="_blank">#openDesk</a> <a href="https://det.social/tags/GovTech" class="mention hashtag" rel="nofollow noopener" target="_blank">#GovTech</a> <a href="https://det.social/tags/CloudNative" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudNative</a> <a href="https://det.social/tags/Ingress" class="mention hashtag" rel="nofollow noopener" target="_blank">#Ingress</a> <a href="https://det.social/tags/certManager" class="mention hashtag" rel="nofollow noopener" target="_blank">#certManager</a> <a href="https://det.social/tags/DigitalSovereignty" class="mention hashtag" rel="nofollow noopener" target="_blank">#DigitalSovereignty</a>

René DudfieldA new UI for cert-manager <a href="https://headlamp.dev/blog/2025/02/27/simplifying-certificate-management-in-kubernetes-with-the-new-cert-manager-plugin-for-headlamp/" rel="nofollow noopener" translate="no" target="_blank">https://headlamp.dev/blog/2025/02/27/simplifying-certificate-management-in-kubernetes-with-the-new-cert-manager-plugin-for-headlamp/</a><a href="https://fosstodon.org/tags/kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#kubernetes</a> <a href="https://fosstodon.org/tags/kubecon" class="mention hashtag" rel="nofollow noopener" target="_blank">#kubecon</a> <a href="https://fosstodon.org/tags/certmanager" class="mention hashtag" rel="nofollow noopener" target="_blank">#certmanager</a> <a href="https://fosstodon.org/tags/cncf" class="mention hashtag" rel="nofollow noopener" target="_blank">#cncf</a>

René DudfieldI'm going to be at <a href="https://fosstodon.org/tags/kubecon" class="mention hashtag" rel="nofollow noopener" target="_blank">#kubecon</a>. At the maintainers summit beforehand, at the contribfest, and at the <a href="https://fosstodon.org/tags/headlamp" class="mention hashtag" rel="nofollow noopener" target="_blank">#headlamp</a> project pavilion.Contribfest session: <a href="https://kccnceu2025.sched.com/event/1td0n" rel="nofollow noopener" translate="no" target="_blank">https://kccnceu2025.sched.com/event/1td0n</a>I'm looking forward to connecting with folks working on different projects. People have been quite busy building out Headlamp Kubernetes UIs for ecosystem tooling and standards like <a href="https://fosstodon.org/tags/gatewayapi" class="mention hashtag" rel="nofollow noopener" target="_blank">#gatewayapi</a> <a href="https://fosstodon.org/tags/prometheus" class="mention hashtag" rel="nofollow noopener" target="_blank">#prometheus</a> <a href="https://fosstodon.org/tags/keda" class="mention hashtag" rel="nofollow noopener" target="_blank">#keda</a> <a href="https://fosstodon.org/tags/flux" class="mention hashtag" rel="nofollow noopener" target="_blank">#flux</a> <a href="https://fosstodon.org/tags/minikube" class="mention hashtag" rel="nofollow noopener" target="_blank">#minikube</a> <a href="https://fosstodon.org/tags/backstage" class="mention hashtag" rel="nofollow noopener" target="_blank">#backstage</a> <a href="https://fosstodon.org/tags/inspektorgadget" class="mention hashtag" rel="nofollow noopener" target="_blank">#inspektorgadget</a> <a href="https://fosstodon.org/tags/flagger" class="mention hashtag" rel="nofollow noopener" target="_blank">#flagger</a> and <a href="https://fosstodon.org/tags/certmanager" class="mention hashtag" rel="nofollow noopener" target="_blank">#certmanager</a> <a href="https://fosstodon.org/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> <a href="https://fosstodon.org/tags/cncf" class="mention hashtag" rel="nofollow noopener" target="_blank">#cncf</a> <a href="https://fosstodon.org/tags/cloudnativecon" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloudnativecon</a>

GilgwathThose who've been reading my toots, might have picked up on the fact that I'm building a <a href="https://social.tchncs.de/tags/kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#kubernetes</a> cluster from scratch (yes, I like pain). After figuring out <a href="https://social.tchncs.de/tags/cri_o" class="mention hashtag" rel="nofollow noopener" target="_blank">#cri_o</a> <a href="https://social.tchncs.de/tags/calico" class="mention hashtag" rel="nofollow noopener" target="_blank">#calico</a> <a href="https://social.tchncs.de/tags/certmanager" class="mention hashtag" rel="nofollow noopener" target="_blank">#certmanager</a> <a href="https://social.tchncs.de/tags/metallb" class="mention hashtag" rel="nofollow noopener" target="_blank">#metallb</a> <a href="https://social.tchncs.de/tags/traefik" class="mention hashtag" rel="nofollow noopener" target="_blank">#traefik</a> and <a href="https://social.tchncs.de/tags/cloudnativepg" class="mention hashtag" rel="nofollow noopener" target="_blank">#cloudnativepg</a> I finally deployed my first actual application: <a href="https://social.tchncs.de/tags/nextcloud" class="mention hashtag" rel="nofollow noopener" target="_blank">#nextcloud</a> ! Wueeh! Extremely stocked! Now I need to figure out how I rope in my ZFS box for persistence, and then I'm ready for a deployment in testing! <a href="https://social.tchncs.de/tags/k8s" class="mention hashtag" rel="nofollow noopener" target="_blank">#k8s</a> <a href="https://social.tchncs.de/tags/selfhosting" class="mention hashtag" rel="nofollow noopener" target="_blank">#selfhosting</a>

Max BachhuberManaged to migrate my first <a href="https://noitl.space/tags/Truecharts" class="mention hashtag" rel="nofollow noopener" target="_blank">#Truecharts</a> app from <a href="https://noitl.space/tags/TrueNAS" class="mention hashtag" rel="nofollow noopener" target="_blank">#TrueNAS</a> to <a href="https://noitl.space/tags/Talos" class="mention hashtag" rel="nofollow noopener" target="_blank">#Talos</a>.Do this only if you need another hobby. It is definitely nothing like the comfort the TrueNAS App Catalogue and UI provided.But i like <a href="https://noitl.space/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> and so it is fine for me, to play around with <a href="https://noitl.space/tags/CertManager" class="mention hashtag" rel="nofollow noopener" target="_blank">#CertManager</a>, <a href="https://noitl.space/tags/RenovateBot" class="mention hashtag" rel="nofollow noopener" target="_blank">#RenovateBot</a>, <a href="https://noitl.space/tags/FluxCD" class="mention hashtag" rel="nofollow noopener" target="_blank">#FluxCD</a> and <a href="https://noitl.space/tags/VolSync" class="mention hashtag" rel="nofollow noopener" target="_blank">#VolSync</a>. Just have to compare resource consumption now 😅

Johannes Schnatterer<a href="https://floss.social/tags/CertManager" class="mention hashtag" rel="nofollow noopener" target="_blank">#CertManager</a> can now be rolled out with GOP. We're planning to extend the support to automatically provision <a href="https://floss.social/tags/TLS" class="mention hashtag" rel="nofollow noopener" target="_blank">#TLS</a> certs via <a href="https://floss.social/tags/letsencrypt" class="mention hashtag" rel="nofollow noopener" target="_blank">#letsencrypt</a> / <a href="https://floss.social/tags/ACME" class="mention hashtag" rel="nofollow noopener" target="_blank">#ACME</a> for all tools with a single parameter 🚀This release also contains contributions of our new maintainer Thomas Michael. Welcome to the team 🥳

JunicastIsn't there a decent alternative to <a href="https://chaos.social/tags/certmanager" class="mention hashtag" rel="nofollow noopener" target="_blank">#certmanager</a> in <a href="https://chaos.social/tags/kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#kubernetes</a> ? I need a tool that support <a href="https://chaos.social/tags/powerdns" class="mention hashtag" rel="nofollow noopener" target="_blank">#powerdns</a> api. kube-lego sadly is deprecated

几乇丨爪丨 🤓 :mastodon:💻🧾 An alle <a href="https://voi.social/tags/CertManager" class="mention hashtag" rel="nofollow noopener" target="_blank">#CertManager</a> Profis:Lassen sich mit der DNS-Challenge und <a href="https://voi.social/tags/Webhook" class="mention hashtag" rel="nofollow noopener" target="_blank">#Webhook</a> auf einem anderen Server, als auf dem die <a href="https://voi.social/tags/Domain" class="mention hashtag" rel="nofollow noopener" target="_blank">#Domain</a> und Website gehostet ist, <a href="https://voi.social/tags/Zertifikate" class="mention hashtag" rel="nofollow noopener" target="_blank">#Zertifikate</a> für die Hauptdomain wie z.B. meinedomain.de erzeugen?Hintergrund: mein <a href="https://voi.social/tags/ejabberd" class="mention hashtag" rel="nofollow noopener" target="_blank">#ejabberd</a> läuft bei mir zuhause auf meiner Hauptdomain, für mein Domain-/Webhoster gibts aber keinen Webhook... Daher erwäge ich zu wechseln falls das möglich wäre...Evtl. kann auch <a href="https://infosec.exchange/@CertManager" class="u-url mention" rel="nofollow noopener" target="_blank">@CertManager</a>, <a href="https://netcup.cafe/@netcup" class="u-url mention" rel="nofollow noopener" target="_blank">@netcup</a> oder <a href="https://manitu.social/@team" class="u-url mention" rel="nofollow noopener" target="_blank">@team</a> was dazu sagen 🤔🔃🙏

Bob Dendry has moved!So I've managed to finally get <a href="https://mstdn.games/tags/Traefik" class="mention hashtag" rel="nofollow noopener" target="_blank">#Traefik</a> working with <a href="https://mstdn.games/tags/CertManager" class="mention hashtag" rel="nofollow noopener" target="_blank">#CertManager</a>.It took lots of frustration, a sidequest around attempting replace Traefik with the <a href="https://mstdn.games/tags/Cilium" class="mention hashtag" rel="nofollow noopener" target="_blank">#Cilium</a> Gateway API implementation, to lots of annoyance and frustration, broken iptables, but we finally got back to pretty much where we started and things started to fall in place from here.So the good news is by separating certificates from Traefik, we can now get Traefik doing HA. Why you ask? Just cause.<a href="https://mstdn.games/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> <a href="https://mstdn.games/tags/Docker" class="mention hashtag" rel="nofollow noopener" target="_blank">#Docker</a> <a href="https://mstdn.games/tags/homelab" class="mention hashtag" rel="nofollow noopener" target="_blank">#homelab</a>

Z3r0 ~ :t_blink:Cert-Manager es DIOS y quien diga lo contrario tendrá que verselas conmigo.<a href="https://maverick-hq.org/tags/kubecosas" class="mention hashtag" rel="nofollow noopener" target="_blank">#KubeCosas</a> <a href="https://maverick-hq.org/tags/certmanager" class="mention hashtag" rel="nofollow noopener" target="_blank">#CertManager</a>

Dentaku (Thomas Renger)Ha, funktioniert: LoadBalancer für <a href="https://fnordon.de/tags/dovecot" class="mention hashtag" rel="nofollow noopener" target="_blank">#dovecot</a> wird automatisch erzeugt, automatisch in DNS eingetragen und automatisch ein TLS-Zertifikat erzeugt. Langsam nimmt mein Mail-auf-Kubernetes-Setup Form an.<a href="https://fnordon.de/tags/k8s" class="mention hashtag" rel="nofollow noopener" target="_blank">#k8s</a> <a href="https://fnordon.de/tags/externaldns" class="mention hashtag" rel="nofollow noopener" target="_blank">#externaldns</a> <a href="https://fnordon.de/tags/certmanager" class="mention hashtag" rel="nofollow noopener" target="_blank">#certmanager</a> <a href="https://fnordon.de/tags/rfc2136" class="mention hashtag" rel="nofollow noopener" target="_blank">#rfc2136</a>

MikaI've just merged a huge PR to my <a href="https://sakurajima.social/tags/Orked" rel="nofollow noopener" target="_blank">#Orked</a> (O-tomated RKE Distribution - GREAT NAME I KNOW) that makes it easier than ever for anyone to set up a production-ready <a href="https://sakurajima.social/tags/RKE2" rel="nofollow noopener" target="_blank">#RKE2</a> <a href="https://sakurajima.social/tags/Kubernetes" rel="nofollow noopener" target="_blank">#Kubernetes</a> cluster in their <a href="https://sakurajima.social/tags/homelab" rel="nofollow noopener" target="_blank">#homelab</a>. With this collection of scripts, all you need to do is just provision the nodes required, including a login/management node, and run the scripts right from the login node to configure all of the other nodes to make up the cluster. This setup includes: - Configuring the Login node with any required or essential dependencies (such as <a href="https://sakurajima.social/tags/Helm" rel="nofollow noopener" target="_blank">#Helm</a>, <a href="https://sakurajima.social/tags/Docker" rel="nofollow noopener" target="_blank">#Docker</a>, <a href="https://sakurajima.social/tags/k9s" rel="nofollow noopener" target="_blank">#k9s</a>, <a href="https://sakurajima.social/tags/kubens" rel="nofollow noopener" target="_blank">#kubens</a>, <a href="https://sakurajima.social/tags/kubectx" rel="nofollow noopener" target="_blank">#kubectx</a>, etc.) - Setup passwordless <a href="https://sakurajima.social/tags/SSH" rel="nofollow noopener" target="_blank">#SSH</a> access from the Login node to the rest of the Kubernetes nodes - Update the <code>hosts</code> file for strictly necessary name resolution on the Login node and between the Kubernetes nodes - Necessary, best practice configurations for all of the Kubernetes nodes including networking configuration, disabling unnecessary services, disabling swap, loading required modules, etc. - Installation and configuration of RKE2 on all the Kubernetes nodes and joining them together as a cluster - Installation and configuration of <a href="https://sakurajima.social/tags/Longhorn" rel="nofollow noopener" target="_blank">#Longhorn</a> storage, including formatting/configuring their virtual disks on the Worker nodes - Deployment and configuration of <a href="https://sakurajima.social/tags/MetalLB" rel="nofollow noopener" target="_blank">#MetalLB</a> as the cluster's load-balancer - Deployment and configuration of <a href="https://sakurajima.social/tags/Ingress" rel="nofollow noopener" target="_blank">#Ingress</a> <a href="https://sakurajima.social/tags/NGINX" rel="nofollow noopener" target="_blank">#NGINX</a> as the ingress controller and reverse proxy for the cluster - this helps manage external access to the services in the cluster - Setup and configuration of <a href="https://sakurajima.social/tags/cert-manager" rel="nofollow noopener" target="_blank">#cert-manager</a> to obtain and renew <a href="https://sakurajima.social/tags/LetsEncrypt" rel="nofollow noopener" target="_blank">#LetsEncrypt</a> certs automatically - supports both <a href="https://sakurajima.social/tags/DNS" rel="nofollow noopener" target="_blank">#DNS</a> and HTTP validation with <a href="https://sakurajima.social/tags/Cloudflare" rel="nofollow noopener" target="_blank">#Cloudflare</a> - Installation and configuration of <a href="https://sakurajima.social/tags/csi-driver-smb" rel="nofollow noopener" target="_blank">#csi-driver-smb</a> which adds support for integrating your external SMB storage to the Kubernetes cluster Besides these, there are also some other helper scripts to make certain related tasks easy such as a script to set a unique static IP address and hostname, and another to toggle <a href="https://sakurajima.social/tags/SELinux" rel="nofollow noopener" target="_blank">#SELinux</a> enforcement to on or off - should you need to turn it off (temporarily). If you already have an existing RKE2 cluster, there's a step-by-step guide on how you could use it to easily configure and join additional nodes to your cluster if you're planning on expanding. Orked currently expects and supports <a href="https://sakurajima.social/tags/RockyLinux" rel="nofollow noopener" target="_blank">#RockyLinux</a> 8+ (should also support any other <a href="https://sakurajima.social/tags/RHEL" rel="nofollow noopener" target="_blank">#RHEL</a> distros such as <a href="https://sakurajima.social/tags/AlmaLinux" rel="nofollow noopener" target="_blank">#AlmaLinux</a>), but I am planning to improve the project over time by adding more <a href="https://sakurajima.social/tags/Linux" rel="nofollow noopener" target="_blank">#Linux</a> distros, <a href="https://sakurajima.social/tags/IPv6" rel="nofollow noopener" target="_blank">#IPv6</a> support, and possibly even <a href="https://sakurajima.social/tags/K3s" rel="nofollow noopener" target="_blank">#K3s</a> for a more lightweight <a href="https://sakurajima.social/tags/RaspberryPi" rel="nofollow noopener" target="_blank">#RaspberryPi</a> cluster for example. I've used this exact setup to deploy and manage vital services to hundreds of unique clients/organisations that I've become obsessed with sharing it to everyone and making it easier to get started. If this is something that interests you, feel free to check it out! If you're wondering what to deploy on a Kubernetes cluster - feel free to also check out my <a href="https://sakurajima.social/tags/mika" rel="nofollow noopener" target="_blank">#mika</a> helm chart repo 🥳 🔗 <a href="https://github.com/irfanhakim-as/orked" rel="nofollow noopener" target="_blank">https://github.com/irfanhakim-as/orked</a> 🔗 <a href="https://github.com/irfanhakim-as/charts" rel="nofollow noopener" target="_blank">https://github.com/irfanhakim-as/charts</a>

bashfulrobot / Dustin KrysakCan anyone recommend a free <a href="https://hachyderm.io/tags/dns" class="mention hashtag" rel="nofollow noopener" target="_blank">#dns</a> provider that can be used with cert-manager? Besides Cloudflare? <a href="https://hachyderm.io/tags/kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#kubernetes</a> <a href="https://hachyderm.io/tags/certmanager" class="mention hashtag" rel="nofollow noopener" target="_blank">#certmanager</a>

Fab :verifiedpurple:Anyone successfully used cert-manager and DNS challenge for a Let's Encrypt certificate with Infomaniak provider ?<a href="https://infosec.exchange/tags/k3s" class="mention hashtag" rel="nofollow noopener" target="_blank">#k3s</a> <a href="https://infosec.exchange/tags/certmanager" class="mention hashtag" rel="nofollow noopener" target="_blank">#certmanager</a> <a href="https://infosec.exchange/tags/letsencrypt" class="mention hashtag" rel="nofollow noopener" target="_blank">#letsencrypt</a> <a href="https://infosec.exchange/tags/kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#kubernetes</a> <a href="https://infosec.exchange/tags/containers" class="mention hashtag" rel="nofollow noopener" target="_blank">#containers</a> <a href="https://infosec.exchange/tags/infomaniak" class="mention hashtag" rel="nofollow noopener" target="_blank">#infomaniak</a>

Scott Williams 🐧<a href="https://ibe.social/@deathkitten" class="u-url mention" rel="nofollow noopener" target="_blank">@deathkitten</a> So far, I'm able to reproduce it with <a href="https://mastodon.online/tags/LetsEncrypt" class="mention hashtag" rel="nofollow noopener" target="_blank">#LetsEncrypt</a> certs issued from <a href="https://mastodon.online/tags/certbot" class="mention hashtag" rel="nofollow noopener" target="_blank">#certbot</a>, <a href="https://mastodon.online/tags/caddy" class="mention hashtag" rel="nofollow noopener" target="_blank">#caddy</a>, and <a href="https://mastodon.online/tags/certmanager" class="mention hashtag" rel="nofollow noopener" target="_blank">#certmanager</a>, both fresh and a month or two old.Firefox 123.0.1 doesn't trust any of them.Again, it still works because the OS CA trust includes it, so most users won't notice anything broken (yet).

Ben HardillAnybody using 2 instances of the Kubernates Nginx Ingress controller on a single AWS EKS instance?I need to support Ingress with a AWS NLB doing HTTPS termination (from a AWS issued wildcard cert) and with a separate instance doing HTTPS termination in Nginx using LetsEncrypt certs issued by certmanager.I think it should be possible if each instance has it's own IngressClass.<a href="https://bluetoot.hardill.me.uk/tags/k8s" class="mention hashtag" rel="nofollow noopener" target="_blank">#k8s</a> <a href="https://bluetoot.hardill.me.uk/tags/kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#kubernetes</a> <a href="https://bluetoot.hardill.me.uk/tags/ingress" class="mention hashtag" rel="nofollow noopener" target="_blank">#ingress</a> <a href="https://bluetoot.hardill.me.uk/tags/certmanager" class="mention hashtag" rel="nofollow noopener" target="_blank">#certmanager</a> <a href="https://bluetoot.hardill.me.uk/tags/LetsEncrypt" class="mention hashtag" rel="nofollow noopener" target="_blank">#LetsEncrypt</a>

le dekMon nom de domaine principal, actuellement hébergé chez <a href="https://piaille.fr/tags/gandi" class="mention hashtag" rel="nofollow noopener" target="_blank">#gandi</a>, arrive à échéance.Vu qu'on ne peut plus compter sur eux, je vais partir chez un registrar moins cher. Ça devrait être <a href="https://piaille.fr/tags/OVH" class="mention hashtag" rel="nofollow noopener" target="_blank">#OVH</a>, vu que j'ai besoin d'un provider supporté par <a href="https://piaille.fr/tags/OctoDNS" class="mention hashtag" rel="nofollow noopener" target="_blank">#OctoDNS</a> et <a href="https://piaille.fr/tags/certmanager" class="mention hashtag" rel="nofollow noopener" target="_blank">#certmanager</a>, je n'ai pas trouvé mieux pour le moment.

Recent searches

Search options

Administered by:

Server stats:

#certmanager