Denis Trofimov
Denis Trofimov
Hello there. Acorn is not finding a TLS secret!? I just tried several times it is not working. > Acorn will automatically inspect each certificate in the Acorn namespace for...
> I didn't realize external-dns relied on an annotation being on the ingress. I am currently working a feature to support the addition of arbitrary user-defined labels and annotations to...
do Acorn want me to name a secret some way? It doesn't pick up my secret. ```sh $ k get secrets -n acorn | grep tls sbx-huma-com-tls-secret kubernetes.io/tls 2 6m28s...
@cjellick do you want to say what I was doing an unexpected way of deploying? It should I put secrets for my workload into `acorn` or `todo-app-acorn-486a834d-ac4` Acorn creates a...
> It looks for a match in the SANs against the hostname. todo-app-acorn-1.sbx.huma.com should accept *.sbx.huma.com TLS cert. ```yaml tls: - hosts: - todo-app-acorn-1.sbx.huma.com secretName: pp-star-sbx-huma-com-secret ``` I have some...
Do Acorn v0.1.4 support one certificate/tls-secret for 2 dnsNames at the moment? Is it a case of not supporting TLS for default "container.app.domain"? ```yaml apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name:...
Hey Bill @cloudnautique This my ingress ```yaml $ k get ing -n todo-app-acorn-ea8f1b90-143 -o yaml apiVersion: v1 items: - apiVersion: networking.k8s.io/v1 kind: Ingress metadata: annotations: acorn.io/targets: '{"server.todo-app-acorn.sbx.huma.com":{"port":8090,"service":"server"},"todo-app-acorn-1.sbx.huma.com":{"port":8090,"service":"server"}}' apply.acorn.io/applied: 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 apply.acorn.io/owner-gvk:...
@cloudnautique Thank you, I think it works as expected. - https://todo-app-acorn-1.sbx.huma.com/ - https://server.todo-app-acorn.sbx.huma.com/ - Both return for Chrome: NET::ERR_CERT_AUTHORITY_INVALID, for Firefox MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT. That is expected. What I had before was...
@ibuildthecloud thank you, following you I tried one more time. In my setup I if both the self-signed cert "todo-app-tls-secret" and my *.sbx.huma TLS secrets present in the "acorn" ns,...
how can I disable the publishing of `server.todo-app-acorn.sbx.huma.com`? Change the `ports: publish: "8090/http"` to `"ports: expose: "8090/http"` or remove it completely from acornfile and supply at run? `acorn run -n...