From c55bec5b5dba83f0daf8798a26e7c4ad8fc2cf69 Mon Sep 17 00:00:00 2001
From: Kochetkov S <kochetkov.s@sarex.io>
Date: Wed, 5 Aug 2026 17:22:50 +0300
Subject: [PATCH] ++ fix acme http01 challenges on external-stage, route all
 domains through istio instead of the dead nginx solver

---
 .../infrastructure/clusterissuer-letsencrypt.yaml     | 11 +----------
 1 file changed, 1 insertion(+), 10 deletions(-)

diff --git a/clusters/brusnika-stage/infrastructure/clusterissuer-letsencrypt.yaml b/clusters/brusnika-stage/infrastructure/clusterissuer-letsencrypt.yaml
index 79afaf3..6d5405f 100644
--- a/clusters/brusnika-stage/infrastructure/clusterissuer-letsencrypt.yaml
+++ b/clusters/brusnika-stage/infrastructure/clusterissuer-letsencrypt.yaml
@@ -9,15 +9,6 @@ spec:
       name: letsencrypt
     server: https://acme-v02.api.letsencrypt.org/directory
     solvers:
-      - selector:
-          dnsNames:
-            - zitadel.test.sarex.brusnika.tech
-            - grafana.test.sarex.brusnika.tech
-            - openobserve.test.sarex.brusnika.tech
-            - vmalert.test.sarex.brusnika.tech
-        http01:
-          ingress:
-            class: istio
       - http01:
           ingress:
-            class: nginx
+            class: istio