Commit Graph

5 Commits

Author SHA1 Message Date
Stéphane Tailland e4642b372c Label the Vault-sourced TLS secret konghq.com/secret=true
The Kong Gateway Operator only watches Secrets carrying this label,
same as the existing Konnect PAT ExternalSecret already does.
2026-08-21 09:49:41 +02:00
Stéphane Tailland 9376bc3cb3 Source per-domain Gateway TLS certs from Vault instead of cert-manager
cert-manager-issued Certificates never synced to Konnect as KongCertificate
objects through the Gateway API listener path, so dataplanes fell back to
Kong's default self-signed cert. Reuse the working kong-namespace pattern
(a static wildcard cert) via ExternalSecret instead.
2026-08-21 09:37:31 +02:00
Stéphane Tailland bf9fcaecd3 External Secrets Store 2026-08-19 18:53:35 +02:00
Stéphane Tailland 22348ce610 Template defaults 2026-08-19 17:34:06 +02:00
Stéphane Tailland 6afd9c4c5f First commit 2026-08-19 16:57:43 +02:00