DEEN

Tag

TLS

← Clear filter

Operations
cert-manager with Scaleway DNS: wildcard certificates via DNS-01
Your domain lives at Scaleway, you need *.example.com – and cert-manager knows Cloudflare and Route 53, but not Scaleway. How wildcard certificates via DNS-01 reach the cluster with Scaleway’s own webhook, pitfalls included.
- TLS
- Scaleway
- Kapsule
Architecture
From ingress-nginx to Envoy Gateway: switching controllers without a dark window
Change the ingress class and deploy: the new controller serves, the old one no longer does, and DNS still points at the old one. The host answers 404 until the TTL expires. Here’s a better way.
- Ingress
- Kubernetes
- TLS
Security
Let’s Encrypt rate limits: why SaaS subdomains need a wildcard certificate
Fifty certificates per domain per week sounds like a lot. Until the fiftieth customer gets stuck in onboarding and the certificate won’t arrive until next week.
- TLS
- SaaS
- Ingress