From 3b46d1e72aefcc407a3d918aaf36e519d1d2d470 Mon Sep 17 00:00:00 2001
From: sirius0xdev <sirius0xdev@proton.me>
Date: Sun, 25 Jan 2026 22:18:20 +0000
Subject: [PATCH] certs

---
 apps/base/customer1/apigateway.yaml | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/apps/base/customer1/apigateway.yaml b/apps/base/customer1/apigateway.yaml
index a3c059a..542db02 100644
--- a/apps/base/customer1/apigateway.yaml
+++ b/apps/base/customer1/apigateway.yaml
@@ -3,8 +3,6 @@ kind: Gateway
 metadata:
   name: external-http-gateway
   namespace: customer1
-  annotations:
-    networking.gke.io/certmap: devops-lab-cert-map
 spec:
   gatewayClassName: gke-l7-global-external-managed  # Use gke-l7-global-external-http for external, or gke-l7-rilb for internal
   listeners:
@@ -13,7 +11,10 @@ spec:
     port: 443
     tls:
       mode: Terminate
-      certificateRefs: [] 
+      certificateRefs:
+      - group: networking.gke.io        # This tells K8s it's a GKE-specific resource
+        kind: CertificateMap            # This tells K8s it's not a Secret
+        name: devops-lab-cert-map 
     allowedRoutes:
       namespaces:
         from: All