argocd-apps

Files

T

History

unkinben 4fc4aed358 Add cnameStrategy: Follow to ACME DNS-01 solvers (#331 )

A live DNS-01 smoke test returned NOTAUTH because the solver walked _acme-challenge.unkin.net to zone unkin.net and sent the rfc2136 UPDATE there, but bind-external is only authoritative for acme.unkin.net; without cnameStrategy: Follow the solver does not chase the delegation CNAME.

- Set `cnameStrategy: Follow` on the `letsencrypt` and `letsencrypt-staging` ClusterIssuer DNS-01 solvers so cert-manager follows the `_acme-challenge.unkin.net -> _acme-challenge.acme.unkin.net` CNAME and updates the `acme.unkin.net` zone.

https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT
---------

Co-authored-by: Ben Vincent <neotheo@gmail.com>
Reviewed-on: #331
Co-authored-by: Ben Vincent <ben@unkin.net>
Co-committed-by: Ben Vincent <ben@unkin.net>

2026-08-02 19:01:32 +10:00

clusterissuer_letsencrypt-staging.yaml

Add cnameStrategy: Follow to ACME DNS-01 solvers (#331 )

2026-08-02 19:01:32 +10:00

clusterissuer_letsencrypt.yaml

Add cnameStrategy: Follow to ACME DNS-01 solvers (#331 )

2026-08-02 19:01:32 +10:00

clusterissuer_vault-issuer.yaml

Import live vault-issuer ClusterIssuer into GitOps (#328 )

2026-08-02 18:00:00 +10:00

clusterrole.yaml

feat: migrate cert-manager from Terraform to ArgoCD (#42 )