From 0bd66e2935cf27a7521a659f77367f9048cec93c Mon Sep 17 00:00:00 2001
From: scottwilliams <scottwilliams@ucsb.edu>
Date: Thu, 4 Sep 2025 10:32:50 -0700
Subject: [PATCH] Don't apply feature gate to k3s

The nginx workaround feature gate ends up forcing cert-manager to use the nginx ingress type for challenges even when the ingress is traefik.

Signed-off-by: scottwilliams <scottwilliams@ucsb.edu>
---
 operator/fleet.yaml | 15 ++++++++++++---
 1 file changed, 12 insertions(+), 3 deletions(-)

diff --git a/operator/fleet.yaml b/operator/fleet.yaml
index ae9b0c4..3c888de 100644
--- a/operator/fleet.yaml
+++ b/operator/fleet.yaml
@@ -8,9 +8,6 @@ helm:
   waitForJobs: true
   values:
     namespace: cert-manager
-    config:
-      featureGates:
-        ACMEHTTP01IngressPathTypeExact: false
     crds: 
       enabled: true
 targetCustomizations:
@@ -40,6 +37,18 @@ targetCustomizations:
             - 1.1.1.1
             - 8.8.8.8
         podDnsPolicy: None
+        config:
+          featureGates:
+            ACMEHTTP01IngressPathTypeExact: false              
     clusterSelector:
       matchLabels:
         provider.cattle.io: gke
+  - name: rke2
+    helm:
+      values:
+        config:
+          featureGates:
+            ACMEHTTP01IngressPathTypeExact: false        
+    clusterSelector:
+      matchLabels:
+        provider.cattle.io: rke2
\ No newline at end of file