ClusterIssuer solver referenced IngressClass "nginx" which does not
exist on cozystack clusters — real classes are named after tenant
namespaces (e.g. tenant-root). Cert issuance only worked because every
requesting Ingress overrode the ClusterIssuer via the legacy
acme.cert-manager.io/http01-ingress-class annotation.
Switch both sides to the modern cert-manager API (available since
cert-manager 1.12; cozystack ships 1.19.3):
- ClusterIssuer: http01.ingress.ingressClassName, value parameterized
from _cluster.expose-ingress (default "tenant-root")
- Ingress annotation: http01-ingress-ingressclassname
These must migrate together — mixing ingressClassName (ClusterIssuer)
with the old http01-ingress-class annotation triggers cert-manager's
"fields ingressClassName and class cannot be set at the same time"
validation and breaks issuance.
Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| charts | ||
| hack | ||
| images | ||
| logos | ||
| templates | ||
| Chart.yaml | ||
| Makefile | ||
| README.md | ||
| values.schema.json | ||
| values.yaml | ||
BootBox
Parameters
Common parameters
| Name | Description | Type | Value |
|---|---|---|---|
whitelistHTTP |
Secure HTTP by enabling client networks whitelisting. | bool |
true |
whitelist |
List of client networks. | []string |
[] |
machines |
Configuration of physical machine instances. | []object |
[] |
machines[i].hostname |
Hostname. | string |
"" |
machines[i].arch |
Architecture. | string |
"" |
machines[i].ip |
IP address configuration. | object |
{} |
machines[i].ip.address |
IP address. | string |
"" |
machines[i].ip.gateway |
IP gateway. | string |
"" |
machines[i].ip.netmask |
Netmask. | string |
"" |
machines[i].leaseTime |
Lease time. | int |
0 |
machines[i].mac |
MAC addresses. | []string |
[] |
machines[i].nameServers |
Name servers. | []string |
[] |
machines[i].timeServers |
Time servers. | []string |
[] |
machines[i].uefi |
UEFI. | bool |
false |