webhook-pdns (cert-manager)
cert-manager DNS-01 ACME solver that talks to the lab PowerDNS over the API.
Quick facts
What it is
Plugs into cert-manager so wildcard certs and per-host certs in *.apps.sub.comptech-lab.com can be issued from Let's Encrypt without exposing port 80 publicly.
Architecture
Add diagrams or topology notes here — how this component sits relative to DC/DR, what replicates, and what speaks to it. Mermaid blocks render as plain text today; embed images under /assets/ when needed.
Configuration
Add chart values overrides, important env vars, OIDC client config, secret references. Link to the source files in infra/gitops-rke2 rather than copying YAML wholesale — the repo is the source of truth.
Operations
Add runbook notes: backup, restore, common troubleshooting, dashboards, on-call cheatsheet entries.
Failover
Add DC/DR cutover/cutback notes: edge HAProxy backend name, healthcheck path, measured cutover/cutback times, smoke-test commands.
References
- Add upstream chart / project links, ADR refs, MR links, and cross-references to other tools in this catalogue.