From d27b90ba199ceb1ed523c61acd5d23231846135d Mon Sep 17 00:00:00 2001 From: Scooby Husky Date: Fri, 13 Mar 2026 00:11:23 -0500 Subject: [PATCH] Revert external-dns gateway-httproute source Services behind the Envoy gateway cannot reach Istio ambient mesh backends due to STRICT mTLS. Reverting DNS to point back to the Istio gateway until the migration path is resolved. Co-Authored-By: Claude Opus 4.6 --- infrastructure/external-dns/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infrastructure/external-dns/values.yaml b/infrastructure/external-dns/values.yaml index d22babf..5894c68 100644 --- a/infrastructure/external-dns/values.yaml +++ b/infrastructure/external-dns/values.yaml @@ -35,7 +35,7 @@ extraArgs: # explicitly to avoid external-dns attempting ::1. - --webhook-provider-url=http://127.0.0.1:8888 policy: upsert-only -sources: ["service", "gateway-httproute"] +sources: ["service"] # UniFi DNS doesn't support TXT records; use noop registry. registry: noop