René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Switch to using the cert-manager DNS solver by default instead of HTTP","articleBody":"The HTTP solver is handy, and fast in most cases but I think we should move over to using the DNS validator by default. \r\nIt can take longer sometimes due to DNS caching, but it is a bit less complex and there are things you just can’t do with the HTTP version, like the chicken-and-egg situation if you need to migrate a domain but you can’t host the validator endpoint on the domain because you haven’t migrated it yet.\r\nThis should be easy enough because we already set up the DNS solver as a cluster issuer called `clusterissuer-letsencrypt-production-dns`. It would require changing the backend projects to use that by modifying the ingress annotation, and then need some testing to make sure it's working. If it works alright, the only change required to this repo would be updating the user-auth ingress to also use the DNS solver.","author":{"url":"https://github.com/bmonkman","@type":"Person","name":"bmonkman"},"datePublished":"2021-10-15T00:11:56.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/235/zero-aws-eks-stack/issues/235"}