mastouille.fr est l'un des nombreux serveurs Mastodon indépendants que vous pouvez utiliser pour participer au fédiverse.
Mastouille est une instance Mastodon durable, ouverte, et hébergée en France.

Administré par :

Statistiques du serveur :

585
comptes actifs

#kubernetes

10 messages10 participants1 message aujourd’hui

Are you spontaneous and don't have any plans for tonight? Then come check out our TechTalkThursday! 💬 We open the doors at 5:30 p.m., the first talk starts at 6 p.m., and at 7:30 p.m. there's pizza, beer, and a chance to chat with speakers and the community. 🍕🍺 For more information, visit meetup.com/ninetechtalkthursda on Meetup, and watch the livestream here youtube.com/watch?v=eTyDfgJsjGs on YouTube. 📹 #techtalkthursday #technicaldebt #kubernetes #nixos #nine

Suite du fil

Okay, this is weird. The ACME HTTP01 validation with Cilium Gateway API, when 301 redirect from 80 to 443 is enabled, some times works, some times doesn't. Apparently it's a coin toss of whoever comes first: the application httproute or the acme solver httproute.

Does anyone have a *working* solution for that scenario?

What the scenario is: Cilium 1.18.1, Gateway API enabled, cert-manager 1.18.2 (numbers coincidence) with HTTP01 ACME solver. The certificate order is issued, the acme solver pod is created, but the ACME challenge gets redirected to HTTPS, so it never completes.

PS: No, I can't use DNS01 due to limitations on my DNS server.

Ok just hear me out.

I have one #Kubernetes #homelab cluster. It consists of several machines, at least one of which I don't fully trust (case in point: it's currently not booting for mysterious reasons). I also tend to monkey with stuff, which decreases the household acceptance factor and increases my stress when I inevitably break things.

What if I had a "critical loads" cluster? One that was just a single VM, running stuff that is very important to the house functioning (I.e. home assistant and friends, omada controller, git host, etc). It would be self contained, only relying on the NAS for backups.

Is this bananas?