My homelab K3s cluster originally used Kubernetes Ingress objects with the NGINX controller, then I switched those objects to Traefik and eventually migrated from Ingress resources to Traefik…
My homelab K3s cluster originally used Kubernetes Ingress objects with NGINX, then I switched the Ingress resources to use Traefik. The Ingresses still had cert-manager annotations, and later…
We run AWS EKS across four VPC environments—corporate, development, staging, and production—and use Envoy Gateway behind internal Network Load Balancers. cert-manager currently obtains certificates through DNS-01 validation against…
I'm facing a challenge deploying cert-manager to my GKE Autopilot cluster, and despite extensive searching, I can't seem to resolve the issue. I'm using the helm chart for…
Hey everyone! I'm a homelabber eager to dive deeper into Kubernetes and get a better grasp of diagnosing issues and understanding the inner workings. My end goal is…
I'm transitioning from ingress-nginx to Envoy Gateway and I'm facing a challenge. My previous setup allowed me to use fake certificates, and if I didn't specify TLS, it…
I'm currently managing a Kubernetes cluster where we use a combination of certificates from cert-manager and some manually managed TLS Secrets, including older vendor certificates. While cert-manager does…
I'm working with an AKS cluster that uses nginx ingress and cert-manager for managing TLS certificates. Currently, everything is functioning great with TLS when using ingress. However, some…
Hey everyone, I'm curious about how you manage access to your clusters using client certificates. Are there any tools that can help with handling these certificates for a…
I'm currently running a Caddy pod in my Kubernetes cluster that uses a Persistent Volume Claim (PVC) to store TLS certificates. The pod has node affinity set, meaning…
I've set up Rancher on my hypervisor and have two public IPv4 addresses: one for my home network using DHCP and another assigned to a worker node. I…
Hi everyone! I've configured mTLS for the ingress of my backend service and it's working perfectly. However, I'm running into trouble when it comes time to renew the…