- Shipped
- July 22, 2026 at 2:26 PM UTC
- Author
- Kamo
- Commit
- b46fe55
wildcard-kamocrm-com was a legacy multi-SAN secret that cert-manager orphaned when its Certificate was repointed at a per-host secret. Nothing renewed it and it expired 2026-07-20, and pinning it here loaded that expired cert into Traefik's default store where it shadowed the live per-host certs. Both IngressRoutes now use the auto-cert-managed default TLSStore, so docs.kamocrm.com and docs-api.kamocrm.com pick up their per-host cert automatically and no secret name is hardcoded here again.