Unable to omit secretName from ingress, while leaving tls enabled
Summary
I have my nginx-ingress controller configured with a default wildcard certificate. This means that an ingress block that defines hosts, but not a secretName, will be served under the default certificate.
tls:
- hosts:
- gitlab.example.com
However, If I omit the secretName in .Values.global.ingress.tls
, a self-signed cert gets generated.
Steps to reproduce
- Make
tls
an empty dictionary: No tls in ingress - Omit the secretName field in the chart but mark
tls.enabled
: Self-signed cert use - Set secretName: specified secret gets used
Configuration used
global:
edition: ce
ingress:
configureCertmanager: false
class: nginx
tls:
enabled: true
# secretName: ssl-certs
Current behavior
SecretName field gets populated by a self-signed cert
Expected behavior
SecretName is omitted.
Versions
- Chart: 5.6.1
- Platform:
- Cloud: EKS + self-hosted
- Kubernetes: 1.20
- Helm: 3.7.1
Edited by Mitchell Nielsen