Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(load-balancer): support for multiple domains in certificate(s) #427

Open
Tracked by #612
carstenblt opened this issue Apr 21, 2023 · 7 comments
Open
Tracked by #612
Labels

Comments

@carstenblt
Copy link

carstenblt commented Apr 21, 2023

Is it possible to assign multiple certificates to a load balancer?

I was expecting

load-balancer.hetzner.cloud/http-managed-certificate-domains: '*.domain1.com,*.domain2.com'

to work but it doesn't.

@github-actions
Copy link
Contributor

This issue has been marked as stale because it has not had recent activity. The bot will close the issue if no further action occurs.

@github-actions github-actions bot added the stale label Jun 21, 2023
@apricote apricote removed the stale label Jun 21, 2023
@timelapse2132
Copy link

We would also need this.

I hope this is not considered issue hijacking but I would like to explain our use case for this feature:
Currently we have a cluster with many different domains and cert-manager. LB has proxy protocol enabled, cert-manager therefore only works if we set load-balancer.hetzner.cloud/hostname on the ingress service object but this prevents us from adding more than one domain. Switching the challenge method is also not an idea because the same issue would occur if we try to access any domain pointing to the lb from within the cluster (Like in angular SSR from frontend pods).

What is recommended in this case? Is there any way to get ip address information without using proxy protocol (like headers set on the LB for example).

@github-actions
Copy link
Contributor

This issue has been marked as stale because it has not had recent activity. The bot will close the issue if no further action occurs.

@github-actions github-actions bot added the stale label Aug 29, 2023
@rwojsznis
Copy link

If you're coming from search here - after hours of trial and error I kinda give up on managed certificates functionality - please see also this comment

went with cert-manager route and everything just work (using hetzner LB + Cloudflare + cert-manager dns01 challange combo)

@github-actions github-actions bot removed the stale label Aug 30, 2023
Copy link
Contributor

This issue has been marked as stale because it has not had recent activity. The bot will close the issue if no further action occurs.

@github-actions github-actions bot added the stale label Nov 29, 2023
@apricote apricote added pinned and removed stale labels Nov 29, 2023
@apricote apricote changed the title support for multiple certificates feat(load-balancer): support for multiple domains in certificate(s) Jan 25, 2024
@apricote
Copy link
Member

Quick question: Would you need one certificate per domain or are multiple domains in one certificate fine? (Through Subject Alternative Name)

@carstenblt
Copy link
Author

that would be finde for me

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

4 participants