Access Hubble UI from local network

[rubiktubik]

Thanks you for great template @onedr0p !

I have successfully setup my kubernetes cluster with talos but cannot reach the hubble-ui from my local network.

I added this to my Local-DNS-Server:
[/${bootstrap_cloudflare.domain}/]${bootstrap_cloudflare.gateway_vip}

When using dig it get the ip of the internal_ingress_route IP. It seems to work!

When executing:
task kubernetes:resources

the ingress for internal hubble-ui is also correct

But in the browser i get a https certificate problem.

Does the hubble-ui route has no certificate and https configured?

I find no annotations in the yaml files

[onedr0p]

Did you switch over to the LE production servers? It's detailed in the README.

[rubiktubik]

Switching to LE prod-certificates was the trick. Now it works!
Thank you for the hint.

But out of interest, where is it defined that an Ingress by default use the wildcard certificate?

Is it this line:

extraArgs:
        default-ssl-certificate: "network/${SECRET_DOMAIN/./-}-production-tls"

In this file:

If I don't want to work with wildcart certificates but want to create a certificate on demand for a specific route? Then I have to make an annotation like in the Certmanager documentation, right? Or Nginx documentation

[onedr0p]

Yes on all fronts 😁