What happened:
The generated secret is of type: Opaque and that cannot be changed because the field is immutable.
In my contour ingress I see error messages:

level=error msg="unresolved secret reference" context=IngressProcessor error="Secret not found" name=github-actions-runner-self-service namespace=github-actions secret=github-actions/ingress-tls

In another cluster the same setup is working. Only difference I was able to find is the secret type: kubernetes.io/tls field.
According to https://projectcontour.io/docs/main/config/tls-termination/ the type should be kubernetes.io/tls

What you expected to happen:

My ingress secret should be generated with the correct type kubernetes.io/tls.

How to reproduce it (as minimally and precisely as possible):
N/A

Anything else we need to know:

• Related: Updating certificate secrets with type kubernetes.io/tls fails #8
• you are awesome! 🙌

Environment:

• develop/eval