move mcpacks from letsencrypt-staging, to prod certs

2026-09-04 13:48:14 +00:00
parent 03954366ba
commit 9932ecf6de
1 changed files with 4 additions and 4 deletions
@@ -6,10 +6,10 @@ metadata:
  name: mcpacks
  namespace: mcpacks
  annotations:
-    # Prove DNS-01 issuance with Let's Encrypt's untrusted staging service
-    # first. Change this to letsencrypt-prod only after the staging Certificate
-    # is Ready; production has strict rate limits for repeated mistakes.
-    cert-manager.io/cluster-issuer: letsencrypt
+    # Staging issuance has been verified, so use Let's Encrypt's publicly
+    # trusted production service. Production has strict rate limits; test any
+    # future hostname or solver change against letsencrypt-staging first.
+    cert-manager.io/cluster-issuer: letsencrypt-prod
 spec:
  tls:
    - hosts: