Fixed issue with cert-manager and nginx path requirements

This commit is contained in:
V
2026-02-01 15:47:47 +00:00
parent 0786a8d75b
commit e363815c6d
7 changed files with 75 additions and 82 deletions
@@ -1,31 +1,30 @@
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-staging
spec:
acme:
email: ENC[AES256_GCM,data:n3PMXRaaOw3mHTE+,iv:AdKUp2cgIs6/4wM2n2WXI9xZ1dPzzrPQhtRgsOaI2Ug=,tag:x74U/+A85Z5v3N7zCEAdMw==,type:str]
server: ENC[AES256_GCM,data:LHJVbmwjg8iwAKE2yR46R/hivMKCvQGI8HHTnROjPMtUdpiMyoGXslJeck89/qVdW6hgTBGb,iv:8uCZu9xWblgu7sRWvVP1i6q+YRQFLHZffL/XJGCmcpg=,tag:PJdmgsDtwkK5CmA3r7AW5A==,type:str]
email: ENC[AES256_GCM,data:YqOjX7qe1wmEPl7c,iv:fjKZIy4P9LhOeQEa2jbzAX6FBqEPq3Cz0lz14h2jOyg=,tag:qdY9y8ouPl2AbHWkDWfbDA==,type:str]
server: ENC[AES256_GCM,data:LCgLx35YyViA47qKsY8q3+70jSRkMHfs7INxrzL19NPQ3ePGeeZiCAp789/6EOTxQRHJQDSS,iv:ooe5aF7rwdFsix3WSbcb2ZmkAE8boDC4FrYZ7lS3EY4=,tag:cIyWhlnHAXM40CiTwYLTwA==,type:str]
privateKeySecretRef:
name: ENC[AES256_GCM,data:Vg4c9Mu5V159/QXz2I3qe45cTQ==,iv:aUvbj+Kx3VmDmxx+QWIjpfo3C4Nc08phZhQwWpfNE88=,tag:90ey7W5TL2G+hPtEG3THZw==,type:str]
name: ENC[AES256_GCM,data:S6lMfFyxX+OIwoIzLd31S0HUqg==,iv:jpBGHY8Fnko4gDrhemr8p+x3lFojd/DVGLrXPXUZkME=,tag:IyePts+acrcVAuNZwF9dEQ==,type:str]
solvers:
- http01:
ingress:
class: ENC[AES256_GCM,data:zIu3D/s=,iv:+Uv62H9i0VGkSufnt3cjjX4VBvr6ONo6tvQzH6r8BxU=,tag:pY57Mbuyg/wwzCTkLoFx4A==,type:str]
class: ENC[AES256_GCM,data:scHkNT0=,iv:B9X58ltjN69bNQt4pW4MDCwwH3fEGQ6VoPTPcTZY528=,tag:RzCVgfJi/H8KbkV46WLIOw==,type:str]
sops:
age:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAxa1B0c2F2TG85RUZqVkRu
RmpYY1d4Rm01NlJPZlVHcDQ1cEl3ZzR3OENBClgzTXAwdDJuZTJ3dGF0N3hzVXJY
VkZEdENaMForSVFIbTg2YmVGelhBMncKLS0tIEJtTmFvKzNYRHEyZk94cGMrTnF6
ZTVLMnBudHVqTzB4eUNrQXBid0c1SUEKEMhX2k0MNYt5rrgMRy3QTIOiIuP0lwJ7
2Pyg7kj2RTQu2plwRZBNzQ2kBfCBkx06MBaJASHHsBQIPUZhtMLelA==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVRzFWM2g3bGE4Mkpqb280
RWRucytlbmt6a0doZU1wditHRU81RFhjamdjCkt5UTBtY1pKQjRKN3lqOXlnR2d2
S1RlTHQrOWFGMVZDcVpyRmZYbEFBcUUKLS0tIEJIVjVGUE81R0JJZ1lncGo1NEk0
VS9IZ3VJQlVLNTJwOFNNKy9WZ2c4czgKysx7Jg41wa7VZumU10Xxt8mVTUcef5ya
h0Nuxr+3IOGlLvLy417ik6OpM8CqbMbAGWaLSN7YyS0tRIOAn88y/g==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-11-15T23:47:15Z"
mac: ENC[AES256_GCM,data:B1opGlOCwM0nCFRWLdpteNuCAb06emGf0I0KKOhlNh0u36DTr1aVRzGV57sJRi8b4rSwPBucP2WzIKFAHY5yKincGdHwPwQ40dun0TreaJrtXiJagz19n2nqc2vZfzlE9G8QdG6Bnos17UaB5b+I5dWYlz1XM8oYOk0pdzrCGas=,iv:fuC+7nKNxHfn+Q7psFQmweRIUFzIcBuZN3rESFmnJL0=,tag:IEVeHB4Kol9GNHJOolamRA==,type:str]
lastmodified: "2026-02-01T15:44:55Z"
mac: ENC[AES256_GCM,data:e9P3FsxkSJurAjgSbjqiIBEAKMUTNIvdO1mgs/pmPpLnTHRoO3dWWtksKRv2mk2SbFy9/QZ/iV5acBtCxobS+vQBIjOqQwY+0BpbcGTcrqEUPAQ7IylyNoJnTMXkalkRvkz4zdVPixT3Zu6jErcSjbG7uxBG1AHhIGPX3WBT0Sc=,iv:W77bGAYFfW9XkWlgY1QoG29o9t1y6pZ996pdj3VdsME=,tag:T1RHeXfZdkBlykEWBEGZcA==,type:str]
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.11.0
---
@@ -35,26 +34,26 @@ metadata:
name: letsencrypt-prod
spec:
acme:
email: ENC[AES256_GCM,data:WROzrrll22ZOAA4i,iv:6c6oni+U4kJO7wKSPVmnkvIyesYR/vYvK0qTY/9RslQ=,tag:d4thMfoyWRU8kPOCaptTng==,type:str]
server: ENC[AES256_GCM,data:hr4tgxj0GJM9oKaMaUjqUBdWByhOwYAQaavPiIYO/vVthmTTG6BY5/5iWa/xMA==,iv:hkuwiVGelzxSeIEBHNpe1tFQm1LjpiQIPfC2hliMQLg=,tag:b9sN3ffRKq9/y+QuBkl0og==,type:str]
email: ENC[AES256_GCM,data:Dh5rc5Wak2MnQqR7,iv:uLmnMlYhjg1X91vwfIHdubVV61u/3tQGKaquIEG2p1k=,tag:vLEWQ6pP6goAwKE5R06uqg==,type:str]
server: ENC[AES256_GCM,data:gMaHtIORxKiv6WuLDygFvr8GhMjbqW6NWqWZSTCLoSi6cQaULD3/j1l30A9IPQ==,iv:mPOqGFikZGsqT6widt0EIc3KXreZXApuZtdjXBK7HuE=,tag:iJLVIOiOd7iwIyjDIRa1vA==,type:str]
privateKeySecretRef:
name: ENC[AES256_GCM,data:6euJ7/Fiu/4DcLY0CK4f3g==,iv:9hLzhVY7/3uWXKrfgvXAOXudgGMc11JiDFuDD297WvY=,tag:ujjexmTBX7PtClg3iGsaCw==,type:str]
name: ENC[AES256_GCM,data:ece7iyTmT7hq5+x1bN225g==,iv:xV0B2Q4ZOwl2itYAtenk/P+9LtJNV2ojuUSXp388Uc0=,tag:uEmv9aKXGTpjr2+HvDgNpA==,type:str]
solvers:
- http01:
ingress:
class: ENC[AES256_GCM,data:6xOo5yo=,iv:g1GO+PME54KZNzrf1mZC+0G8aw+XJ1CEw+i8NakqVPM=,tag:NaIyYrnJOMPsLdoNBCqMFQ==,type:str]
class: ENC[AES256_GCM,data:HIwSVYg=,iv:suD5+sQF4uOsWyr/C7RaG+WXuFf38kh2XHKulAxbcPU=,tag:wgT4E5/2Zpn1fETnu0zWpw==,type:str]
sops:
age:
- recipient: age1u0mt3kmhsr9tz2jaw8n0ztu7s9hnlffkd2acxf85cvk6tysj4gsqqulfdq
enc: |
-----BEGIN AGE ENCRYPTED FILE-----
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBtSGhmM2F4Y0VSRzhWSWRX
cU95OGFNRUxNM1FucTBVOFlpUHdBbFIwSWs0ClZvblN0OGtSbWdSZ0RUTVZHV3FK
QW9mck9TOWt4ejdiT0ZHak9BdWlnemMKLS0tIHpNNUh3b0NFNlBQckZQZzc4cVgx
ais3c3orMDcxbjlIUnZlbEZyVVZUTTQKbOMIUUOKX4b3qDsQhrkqWpsuJcSISc9R
Zg3Y5Ph5iJxrxmftDA4rxl0WFfGhI67JCTKPDpN0Dzfm663eMnKe1g==
YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBVRzFWM2g3bGE4Mkpqb280
RWRucytlbmt6a0doZU1wditHRU81RFhjamdjCkt5UTBtY1pKQjRKN3lqOXlnR2d2
S1RlTHQrOWFGMVZDcVpyRmZYbEFBcUUKLS0tIEJIVjVGUE81R0JJZ1lncGo1NEk0
VS9IZ3VJQlVLNTJwOFNNKy9WZ2c4czgKysx7Jg41wa7VZumU10Xxt8mVTUcef5ya
h0Nuxr+3IOGlLvLy417ik6OpM8CqbMbAGWaLSN7YyS0tRIOAn88y/g==
-----END AGE ENCRYPTED FILE-----
lastmodified: "2025-11-15T23:47:15Z"
mac: ENC[AES256_GCM,data:pUXu12zIDvUG1+Qfu2gvYmnLfSMNAl3DU4Z1ZPIYVBg0XX6btEyO8o9TXssoG6efIH+FrMkNVj41BMIdJnp12zcjMyUcD9GKvlJIYQla59uy/XBVArgvgYF8iBaz6PfzTFVYPUoP2WPi7Q9L3w12jsw1wRyEpYshAFtVJxtvhCg=,iv:o9oatVlXBl682FYCnFbqcNxQ0sKLlj2qI4m1k1seVKE=,tag:t46aEUU7RWHA/vPTFPinew==,type:str]
lastmodified: "2026-02-01T15:44:55Z"
mac: ENC[AES256_GCM,data:e9P3FsxkSJurAjgSbjqiIBEAKMUTNIvdO1mgs/pmPpLnTHRoO3dWWtksKRv2mk2SbFy9/QZ/iV5acBtCxobS+vQBIjOqQwY+0BpbcGTcrqEUPAQ7IylyNoJnTMXkalkRvkz4zdVPixT3Zu6jErcSjbG7uxBG1AHhIGPX3WBT0Sc=,iv:W77bGAYFfW9XkWlgY1QoG29o9t1y6pZ996pdj3VdsME=,tag:T1RHeXfZdkBlykEWBEGZcA==,type:str]
unencrypted_regex: ^(apiVersion|metadata|kind|type)$
version: 3.11.0