Source per-domain Gateway TLS certs from Vault instead of cert-manager

cert-manager-issued Certificates never synced to Konnect as KongCertificate objects through the Gateway API listener path, so dataplanes fell back to Kong's default self-signed cert. Reuse the working kong-namespace pattern (a static wildcard cert) via ExternalSecret instead.
2026-08-21 09:37:31 +02:00
parent b4fd7064a3
commit 9376bc3cb3
4 changed files with 24 additions and 18 deletions
@@ -4,4 +4,4 @@ resources:
  - konnectapiauthconfiguration.yaml
  - gatewayconfiguration.yaml
  - gateway.yaml
-  - certificate.yaml
+  - externalsecret-tls.yaml