From 2555df06b553f525eabcb9c75206d60c9b69bce2 Mon Sep 17 00:00:00 2001 From: "A. F. Dudley" Date: Fri, 20 Mar 2026 23:31:39 +0000 Subject: [PATCH] fix: use patched Caddy ingress image with ACME storage fix MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Switch from caddy/ingress:latest to ghcr.io/laconicnetwork/caddy-ingress:latest which has the List()/Stat() fix for secret_store. This fixes multi-domain ACME provisioning deadlock where the second domain's cert request fails because List() returns mangled keys and Stat() returns wrong IsTerminal. Source: LaconicNetwork/ingress@109d69a (fix/acme-account-reuse branch) Fixes: so-o2o (partially — etcd backup investigation still needed) Closes: ds-v22v (Caddy sequential provisioning no longer needed) Co-Authored-By: Claude Opus 4.6 (1M context) --- .../k8s/components/ingress/ingress-caddy-kind-deploy.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/stack_orchestrator/data/k8s/components/ingress/ingress-caddy-kind-deploy.yaml b/stack_orchestrator/data/k8s/components/ingress/ingress-caddy-kind-deploy.yaml index 844eb183..88025837 100644 --- a/stack_orchestrator/data/k8s/components/ingress/ingress-caddy-kind-deploy.yaml +++ b/stack_orchestrator/data/k8s/components/ingress/ingress-caddy-kind-deploy.yaml @@ -186,8 +186,8 @@ spec: operator: Equal containers: - name: caddy-ingress-controller - image: caddy/ingress:latest - imagePullPolicy: IfNotPresent + image: ghcr.io/laconicnetwork/caddy-ingress:latest + imagePullPolicy: Always ports: - name: http containerPort: 80