From a8431d15c627149dfe2493acaba376e80da05ad1 Mon Sep 17 00:00:00 2001 From: ahmza Date: Fri, 16 Oct 2026 16:42:46 +0000 Subject: [PATCH] Fix cert-manager checks with split DNS --- apps/cert-manager/values.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/apps/cert-manager/values.yaml b/apps/cert-manager/values.yaml index 36d833b..3d9e5a6 100644 --- a/apps/cert-manager/values.yaml +++ b/apps/cert-manager/values.yaml @@ -7,3 +7,11 @@ cert-manager: # separate manual step. `installCRDs` is the older, deprecated name for # this same setting. enabled: true + + # Technitium serves a private, split-horizon ahmza.com zone, while DNS-01 + # challenge TXT records are created in the public Cloudflare zone. Use + # public resolvers for ACME self-checks so cert-manager sees the same TXT + # record Let's Encrypt sees; ordinary Pods still use normal cluster DNS. + extraArgs: + - --dns01-recursive-nameservers-only + - --dns01-recursive-nameservers=1.1.1.1:53,8.8.8.8:53