Skip to content

Commit

Permalink
Apply suggestions from code review
Browse files Browse the repository at this point in the history
  • Loading branch information
cloudjumpercat authored Jan 31, 2025
1 parent 89e5a8b commit 7ebb064
Showing 1 changed file with 8 additions and 9 deletions.
17 changes: 8 additions & 9 deletions app/konnect/gateway-manager/serverless-gateways/custom-dns.md
Original file line number Diff line number Diff line change
Expand Up @@ -37,17 +37,16 @@ title: Custom Domains for Serverless Gateways

2. Click the action menu on the end of the row you want to delete and click **Delete**.

## Custom Domain Attachment & CAA Record Issue
## Custom domain attachment and CAA record troubleshooting

If your custom domain attachment fails, check if your domain has a CAA record restricting certificate issuance. Serverless Gateways uses Let's Encrypt CA to provision SSL/TLS certificates. If your CAA record does not include the required CA, certificate issuance will fail.
If your custom domain attachment fails, check if your domain has a Certificate Authority Authorization (CAA) record restricting certificate issuance. Serverless Gateways use Let's Encrypt CA to provision SSL/TLS certificates. If your CAA record doesn't include the required CA, certificate issuance will fail.

Steps to Fix:
1. Check existing CAA records
* Run: dig CAA yourdomain.com +short
* If a CAA record exists but doesn't allow Let's Encrypt (letsencrypt.org), update it.
2. Update the CAA record (if needed)
* yourdomain.com. CAA 0 issue "letsencrypt.org"
You can resolve this issue by doing the following:

1. Check existing CAA records by running `dig CAA yourdomain.com +short`.
If a CAA record exists but doesn't allow Let's Encrypt (`letsencrypt.org`), update it.
2. Update the CAA record, if needed. For example: `yourdomain.com. CAA 0 issue "letsencrypt.org"`
3. Wait for DNS propagation and retry attaching your domain.

If no CAA record exists, no changes are needed. More details: [Let's Encrypt CAA Guide](https://letsencrypt.org/docs/caa/)
If no CAA record exists, no changes are needed. For more information, see the [Let's Encrypt CAA Guide](https://letsencrypt.org/docs/caa/).

0 comments on commit 7ebb064

Please sign in to comment.