Aleksei Sviridkin 9e3ae7447b fix(ingress): keep tls section in operator wildcard mode ...

Dropping the whole tls block in wildcard mode disabled the forced
HTTP-to-HTTPS redirect: ingress-nginx only issues the 308 redirect when
TLS is enabled for the Ingress, while a host without a tls section is
still served on 443 with the default certificate but stays reachable
over plain HTTP. Keep the tls section with the host list and omit only
the per-host secretName, so ingress-nginx falls back to the operator
wildcard configured as the default SSL certificate and the redirect
stays enforced, matching the non-wildcard behaviour.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-06-10 03:18:42 +03:00

..

ingress_wildcard_test.yaml

fix(ingress): keep tls section in operator wildcard mode

2026-06-10 03:18:42 +03:00