From 6f6e95ae7ab5773d8f4fca52db8700c72e7159a2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?C=C3=A9dric=20Verstraeten?= Date: Tue, 11 Aug 2026 14:22:20 +0000 Subject: [PATCH] docs(README): clarify cert-manager self-checks DNS configuration --- modules/amazon-eks-documentdb/README.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/modules/amazon-eks-documentdb/README.md b/modules/amazon-eks-documentdb/README.md index 4161c64..9986c65 100644 --- a/modules/amazon-eks-documentdb/README.md +++ b/modules/amazon-eks-documentdb/README.md @@ -234,6 +234,11 @@ Install the controllers and resources: ./ingress/install.sh ``` +The cert-manager values use `1.1.1.1` and `8.8.8.8` for HTTP-01 self-checks. +This avoids waiting for the AWS VPC resolver if it cached an `NXDOMAIN` before +the public records were created. The override affects only cert-manager's ACME +self-checks; normal cluster DNS continues to use the VPC resolver. + The script prints the NLB hostname. Create both DNS records as CNAMEs pointing to that hostname. You can retrieve it again with: