Describe the expected outcome

The cert-manager.io/cluster-issuer annotation for Ingress should be allowed to point to a AWSPCAClusterIssuer.

Describe the actual outcome

To refer to a AWSPCAClusterIssuer, cert-manager only recognizes cert-manager.io/issuer and not cert-manager.io/cluster-issuer.

This is counter-intuitive given that cluster-issuer is supposed to point to a non-namespaced resource.

https://cert-manager.io/docs/usage/ingress/#supported-annotations

Steps to reproduce

1. Deploy cert-manager and aws-privateca-issuer using Helm
2. Create a AWSPCAClusterIssuer
3. Create a test app with an Ingress and annotate it with cert-manager.io/cluster-issuer

The result is that nothing happens at all - the annotation is effectively ignored.

Relevant log output

No response

Version

1.2.4

Have you tried the following?

• Check the Troubleshooting section
• Search open issues

Category

Other

Severity

Severity 3