Nick Young

That does seem weird, but I'm not sure how to help with it. There's no reason why a call to `https` should need access to port 80, and Cilium shouldn't...

@arturs706, that error is a cert-manager error, saying that it could not reach through and perform the required HTTP01 check. I suggest two things, in order: - review the cert-manager...

Thanks for this @davinkevin, I'll mark this down for the relevant team's attention and see if some has a chance to pick it up.

Okay, this is actually expected behavior (I know, it seems weird, but bear with me). Routing and policy enforcement in Cilium is actually done with CiliumEndpoints, which are separate objects...

@llhhbc, since the version you are running, there have been 12 releases, each with more than a hundred fixes. There is a reasonable chance that whatever is causing your issue...

I'm sorry @llhhbc, but we can't help you troubleshoot an issue with your environment. We _can_ help if you can confirm that there is a bug, and that it persists...

I'm sorry @llhhbc, but I cannot interactively troubleshoot this issue with you on Slack either. As I said, if you can find a reproduction, then I can assign this issue...

Uh, I think something has gone wrong here, that is a _very_ long review list for a 26 line PR. @Pionerd, did you manually request extra reviews?

/test

SPIRE does expect to be always online, so that it can rotate the certificates before they expire. SPIRE depends on there being a valid certificate chain for each step in...