Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Using server.ingress.extraHosts and server.ingress.extraTls leads to non-working TLS ingress #3080

Open
ntesteca opened this issue Dec 16, 2024 · 0 comments
Labels
argo-cd bug Something isn't working

Comments

@ntesteca
Copy link

Describe the bug

Trying to setup Argo-CD with two domain, I added the second one in the values. Certificates secrets already in place.

server:
  ingress:
    extraHosts:
      - name: domain2
        path: /
    extraTls:
      - hosts:
          - domain2
        secretName: domain2-tls

But it is rendered as

tls:
    - hosts:
        - domain1
        - domain2
      secretName: argocd-server-tls
    - hosts:
        - domain2
      secretName: domain2-tls

We see in the ingress controler logs that it checks if secret argocd-server-tls is valid for domain2, fails and fallbacks on the default ingress certificate and does not check secret domain2-tls
If we remove - domain2 from tls.hosts[0], it is working as expected.

Related helm chart

argo-cd

Helm chart version

7.0.0

To Reproduce

Setup an additionnal TLS domain server.ingress.extraHosts and server.ingress.extraTls

Expected behavior

Ingress using the correct certificate for the second domain.

Screenshots

No response

Additional context

No response

@ntesteca ntesteca added the bug Something isn't working label Dec 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
argo-cd bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants