- Shipped
- 22 ஜூலை, 2026 அன்று 2:27 PM UTC
- Author
- Kamo
- Commit
- 6b9fde5
The cert-converter init container built its PKCS12 keystore from wildcard-kamocrm-com, a legacy multi-SAN secret that cert-manager orphaned when its Certificate was repointed at a per-host secret. Nothing renewed it and it expired 2026-07-20, so every pod start since has converted an expired certificate. Mount tls-media-kamocrm-com, the per-host cert for the hostname this service actually serves. The volume stays optional:true, so the existing skip-TLS path still applies if the secret is absent.