- Shipped
- September 23, 2026 at 2:21 PM UTC
- Author
- Kamo
- Commit
- 014201b
Opening a Hosted Computer produced a browser tab that appeared and vanished. The launch link is correct and so is the token: SecurityService builds **************** from KAMO_HC_GUAC_BASE_URL, whose default is that host. The host has no certificate and no A record, so the tab dies before anything in Kamo hears about it — no request reaches Traefik, nothing is logged, and the computer sits AWAKE and healthy the whole time. The hc-https IngressRoute already references tls-computers-kamocrm-com by name; the secret was simply never minted, because this service issues for an explicit list and computers.kamocrm.com was not on it. desktop.kamocrm.com is listed for exactly the same reason — nothing hits either host until somebody is handed a link, so neither is ever discovered from Traefik's logs the way a tenant domain is. Also mirrored into `hosted-computers`, because the IngressRoute lives there and references the secret by name in its own namespace. This mints NOTHING until the A record exists. The loop skips a host whose DNS does not resolve, because an HTTP-01 challenge against it cannot be answered: ⏭️ Skipping media.b11capital.com (DNS does not resolve; HTTP-01 would fail) computers.kamocrm.com needs the same A record as kamocrm.com and desktop.kamocrm.com, 47.181.8.84. That part is at the DNS provider, not here. Once it resolves, this issues within a loop and mirrors the secret without further action.