James Wilson

Thanks for the response @cindymullins-dw, I have tested that theory by first uninstalling the helm chart for emissary-apiext since it also stores secrets in the emissary-system namespace to track helm...

Hi @cindymullins-dw, we ended up fixing by adding a startup probe (below) to the emissary-apiext deployment to allow them the time needed to fully start and create the TLS cert...

Yes the issue we encountered is separate to your 1yr expiry, our issue is that the pods take a long time to startup when the secret is not present and...

Any progress or updates on this issue Infoblox dev's? We are seeing the same issue after updating the External-DNS helm chart.