unkin/argocd-apps
3
0
Fork 0
Code Issues 7 Pull Requests 3 Actions Packages Projects Releases Wiki Activity

Add cnameStrategy: Follow to ACME DNS-01 solvers #331

Merged
benvin merged 1 commits from benvin/issuer-cname-follow into main 2026-08-02 19:01:33 +10:00
Conversation 0 Commits 1 Files Changed 2
+2

1 Commits

Author SHA1 Message Date
Ben Vincent 9ed9ebe167 Add cnameStrategy: Follow to ACME DNS-01 solvers
ci/woodpecker/pr/vector-test Pipeline was successful
Details
ci/woodpecker/pr/pre-commit Pipeline was successful
Details
ci/woodpecker/pr/kubeconform Pipeline was successful
Details 
A live smoke test showed cert-manager sending the rfc2136 UPDATE to zone
unkin.net (walked from _acme-challenge.unkin.net), which bind-external is
not authoritative for, returning NOTAUTH; the solver was not following the
delegation CNAME.

- Set cnameStrategy: Follow on the letsencrypt and letsencrypt-staging
  ClusterIssuer DNS-01 solvers so cert-manager chases the
  _acme-challenge.unkin.net -> _acme-challenge.acme.unkin.net CNAME and
  updates the acme.unkin.net zone.

Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
 2026-08-02 18:49:38 +10:00