From baae9b289ade2fd66401660ab558017fea396e62 Mon Sep 17 00:00:00 2001 From: Will Anderson Date: Mon, 4 May 2026 14:37:32 -0500 Subject: [PATCH] fix: drop bogus letsencrypt certResolver from dharma IngressRoute Traefik has no certificate resolver named 'letsencrypt' configured (this cluster terminates TLS at Cloudflare and uses Traefik's default cert via the websecure entrypoint, matching every other neuron-prod IngressRoute). The invalid certResolver caused Traefik to refuse the router with: ERR Router uses a nonexistent certificate resolver certificateResolver=letsencrypt routerName=neuron-prod-dharma-... so requests to dharma.neurontechnologies.ai/health surfaced as 502 from Cloudflare even though the dharma pod was healthy on :8765. --- .../legion/k8s/neuron-technologies/dharma/ingressroute.yaml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/servers/legion/k8s/neuron-technologies/dharma/ingressroute.yaml b/servers/legion/k8s/neuron-technologies/dharma/ingressroute.yaml index 413333e..291bfa2 100644 --- a/servers/legion/k8s/neuron-technologies/dharma/ingressroute.yaml +++ b/servers/legion/k8s/neuron-technologies/dharma/ingressroute.yaml @@ -14,5 +14,6 @@ spec: services: - name: dharma port: 8765 - tls: - certResolver: letsencrypt + # TLS terminates at Cloudflare; tunnel reaches Traefik with noTLSVerify. + # Traefik websecure entrypoint has its own default cert (no resolver + # configured in this cluster), matching every other neuron-prod IngressRoute.