From 95a1b30ff2f357b76959a487446b42ffd99a94bc Mon Sep 17 00:00:00 2001 From: Devin Buhl Date: Thu, 23 May 2024 12:19:12 -0400 Subject: [PATCH] feat: use DoH for cert-manager nameservers Signed-off-by: Devin Buhl --- .../apps/cert-manager/cert-manager/app/helmrelease.yaml.j2 | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/bootstrap/templates/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml.j2 b/bootstrap/templates/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml.j2 index 5a049648..b72a878d 100644 --- a/bootstrap/templates/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml.j2 +++ b/bootstrap/templates/kubernetes/apps/cert-manager/cert-manager/app/helmrelease.yaml.j2 @@ -22,13 +22,8 @@ spec: retries: 3 values: installCRDs: true - dns01RecursiveNameservers: 1.1.1.1:53,9.9.9.9:53 + dns01RecursiveNameservers: https://1.1.1.1:443/dns-query,https://1.0.0.1:443/dns-query dns01RecursiveNameserversOnly: true - podDnsPolicy: None - podDnsConfig: - nameservers: - - "1.1.1.1" - - "9.9.9.9" prometheus: enabled: true servicemonitor: