-
Notifications
You must be signed in to change notification settings - Fork 17
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix installation fails when using Let's Encrypt cluster issuer #119
base: main
Are you sure you want to change the base?
Conversation
The consumers need to reference the correct name of the tlsIssuers. Cosummers are traefik ingress and the cluster-ip-cert Signed-off-by: Phan Le <phan.le@suse.com>
Signed-off-by: Phan Le <phan.le@suse.com>
Signed-off-by: Phan Le <phan.le@suse.com>
Hi @PhanLe1010 . Thank you for your contribution. It will be reviewed shortly. In the meantime, would you mind signing your commits in this patch set? If you are not familiar with how commits can be signed, please refer to the github documentation. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm concerned about dropping support for wildcard certificates. This will break vhost-based bucket access.
Also, please keep in mind that you should remove lines instead of commenting them, unless there's a compelling reason to leave them commented in the code.
spec: | ||
tls: | ||
- hosts: | ||
- '{{ include "s3gw.serviceName" . }}.{{ .Values.publicDomain }}' | ||
- '*.{{ include "s3gw.serviceName" . }}.{{ .Values.publicDomain }}' | ||
# - '*.{{ include "s3gw.serviceName" . }}.{{ .Values.publicDomain }}' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Maybe @m-ildefons can comment on this, but I think this will not work. We need wildcard certificates for vhost-based bucket access.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks @jecluis , we are discussing this wildcard cert topic inside our discuss-s3gw
Slack channel. I will update the PR once we come to a conclusion
Describe your changes
This PR fixes 3 bugs described in each commits:
Issue ticket number and link
Checklist before requesting a review