- Ya
- 30 Juni 2026, 18:08 UTC
- Mwandishi
- Kamo
- Ahadi ya
- 8c3318b
SSL errors: kamo Traefik is a LoadBalancer with externalIPs 192.168.4.22 (k1m1) + externalTrafficPolicy=Local, so it MUST run on k1m1 — the pod rebalance moved it to k3m1, leaving 192.168.4.22:443 with no local endpoint so requests fell through to rke2-ingress-nginx's fake cert. Pin it to k1m1. auto-cert: k2m1 is decommissioned, so drop the MinIO/rclone cross-cluster coordination — state/locks/cert-dirs now pod-local (cert-manager Certificates+secrets are the durable truth); removed the /mnt/shared-files hostPath mount; pinned to k1m1 (needs host kubectl + Traefik logs); single replica. (AUTO-CERT-MINIO-SETUP.md doc left as stale historical note.)