Tobias Florek

It did not work for some people, I guess because of bugs in openshift. Additionally, having the certificates in two places (the route and a secret) is not nice. I...

I don't have much time now, can you please test the path-routes branch? It should fix that part (and lay the foundation of grouping certificates).

Did you have a chance to test the branch?

Do you mean: route redeployment? I prefer recording above whether the route has a certificate and checking below. What do you think?

I understand the problem. I am kind of uncomfortable to patch the route any time, unconditionally because of the unnecessary load on the api server. What logic do you think...

It does not matter whether the certificate is different, it will nonetheless create a new route revision.

I am thinking about the following plan. - Use [kube-cert-manager](https://github.com/PalmStoneGames/kube-cert-manager) for most parts. - Have one global controller, that watches routes, sets certificates and keys to routes and manages the...

I did consider it, but dismissed it. My main argument is that it makes it non-standard and that it's not possible to compose changes to the router template (most of...

I meant, that you could circumvent that check when deploying a template including explicit .well-known/acme-challenge.

I don't remember having had that problem. Did you try the `oc patch` with the same credentials? (You can find them in `/run/secrets/...`)