jakman85andClaude Opus 4.8 8a7700e49a fix(tls): switch dev to LE production issuer so in-cluster clients trust the wildcard cert ...

oauth2-proxy + Grafana OIDC discovery to keycloak.home.keithjackson.dev failed x509
'unknown authority' — the wildcard was LE-staging (untrusted). Prod issuer is registered
+ Ready; switching ACME_CLUSTER_ISSUER dev override staging->prod re-issues a publicly
trusted cert. Needed for functional SSO (R-IDP) + R-TLS-01/03 'trusted'.

NOTE: the trusted-tls conformance test embeds the LE-staging root and must be updated to
the LE production root (ISRG Root X1) / system trust — follow-up.

Co-Authored-By: Claude Opus 4.8 <[email protected]>

2026-08-24 22:39:47 -05:00

..

kustomization.yaml

fix(tls): switch dev to LE production issuer so in-cluster clients trust the wildcard cert

2026-08-24 22:39:47 -05:00

sync.yaml

feat(gitops): self-managing root Kustomization (fixes F-OPS1)

2026-08-17 16:48:57 -05:00