Commit Graph
2 Commits
Author SHA1 Message Date
jnfrati ae765a09c5 [proxy] Serve UBI http-01 challenges on an unprivileged port
The challenge listener defaulted to :80, which the image's non-root user
cannot bind on runtimes that keep the kernel's privileged-port floor,
such as OpenShift and Podman. The proxy logged the failure and kept
running without it, so http-01 issuance could never succeed. Default it
to :8081, mirroring how the main listener already moves to :8443.
2026-09-23 17:29:33 +02:00
jnfrati c01bf1a90e [proxy] Add a release-wired UBI image variant 2026-09-08 13:35:35 +02:00