修复 cert-manager Gateway API ACME solver

2026-09-16 12:16:23 +00:00
parent aae19850cf
commit 40703782ea
2 changed files with 11 additions and 0 deletions
@@ -44,6 +44,13 @@ cainjector:
    limits:
      memory: 256Mi

+# bao-acme solves HTTP-01 through the shared Gateway. The ClusterIssuer can be
+# accepted while this is disabled, but every Challenge then stays pending with
+# "gateway api is not enabled". Gateway API CRDs are installed by Envoy Gateway.
+config:
+  gatewayAPI:
+    enabled: true
+
 # ⚠ DNS-01 self-check: cert-manager polls authoritative NS for the _acme-challenge
 # TXT record before telling the CA to validate. By default it asks the cluster's
 # resolver, which for ad.ddupan.top is CoreDNS -> the Samba AD DC (k3s/coredns-custom.yaml).