Ben Vincent 9ed9ebe167 Add cnameStrategy: Follow to ACME DNS-01 solvers ...

A live smoke test showed cert-manager sending the rfc2136 UPDATE to zone
unkin.net (walked from _acme-challenge.unkin.net), which bind-external is
not authoritative for, returning NOTAUTH; the solver was not following the
delegation CNAME.

- Set cnameStrategy: Follow on the letsencrypt and letsencrypt-staging
  ClusterIssuer DNS-01 solvers so cert-manager chases the
  _acme-challenge.unkin.net -> _acme-challenge.acme.unkin.net CNAME and
  updates the acme.unkin.net zone.

Claude-Session: https://claude.ai/code/session_01JUoARVdmhxKQHyyyp1pxeT

2026-08-02 18:49:38 +10:00

..

base

Add cnameStrategy: Follow to ACME DNS-01 solvers

2026-08-02 18:49:38 +10:00

overlays/au-syd1

Add bind-external namespace for externally-reachable zones (#329)

2026-08-02 17:53:34 +10:00