Gramoz Krasniqi

@dfreeman great then i will try your solution this week and see if it is fitting my requirements. Thanks a lot👍 .

The first policy has a typo `engress`->`egress` ;)

@tschirmer i would also allow port 8089 for the acme-http-solver pod. In case that you have deny_all for a namespace the ingress controller wont be able to route the traffic...

@tschirmer i think you are defining communication routes only from/to cert-manager components to acme-solver and vice versa. When configuring HTTP-01 challenges, internally an Ingress object will be created pointing to...

@sc250024 the webhook is called directly from the k8s api server. Please check the following documentation: https://docs.cert-manager.io/en/release-0.9/getting-started/webhook.html

Hey @sc250024 you dont have to provide any of that. Cloud providers give a managed instance of k8s master node and provide high availability by putting the master nodes in...