don't set cert issuer on ingress to prevent replacement of a certificate

enonic · Nov 8, 2023 · 9fc8aa8 · 9fc8aa8
1 parent 268a52e
commit 9fc8aa8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...operator/src/main/java/com/enonic/kubernetes/operator/domain/OperatorIngressCertSync.java b/...operator/src/main/java/com/enonic/kubernetes/operator/domain/OperatorIngressCertSync.java
@@ -122,7 +122,7 @@ public void syncIngress( final Domain domain, final Ingress ingress )
                 case DOMAIN_WILDCARD:
                     if ( cfgHasKey( "dns.lb.domain.wildcardCertificate" ) )
                     {
-                        newAnnotations.put( "cert-manager.io/cluster-issuer", getClusterIssuer( domain ) );
+//                        newAnnotations.put( "cert-manager.io/cluster-issuer", getClusterIssuer( domain ) );
                         newTLS.add( new IngressTLS( Arrays.asList( host ), cfgStr( "dns.lb.domain.wildcardCertificate" ) ) );
                     }
                     else