From c541efadda44aaec6fc08248a68c4383d2c0295f Mon Sep 17 00:00:00 2001 From: Fedello <31769405+pvillaverde@users.noreply.github.com> Date: Tue, 28 Jul 2026 18:49:20 +0200 Subject: [PATCH 1/2] docs(ngf): add clarification on listener certificateRefs https://github.com/nginx/nginx-gateway-fabric/discussions/5647 --- content/ngf/traffic-security/integrate-cert-manager.md | 1 + 1 file changed, 1 insertion(+) diff --git a/content/ngf/traffic-security/integrate-cert-manager.md b/content/ngf/traffic-security/integrate-cert-manager.md index 59b61f69c..4e3694830 100644 --- a/content/ngf/traffic-security/integrate-cert-manager.md +++ b/content/ngf/traffic-security/integrate-cert-manager.md @@ -144,6 +144,7 @@ cafe-secret kubernetes.io/tls 2 20s ``` --- +- Multiple `certificateRefs` apply to the Listener's `hostname` and are not automatically selected based on the hostnames of attached HTTPRoute resources. Use separate HTTPS Listeners for different domains that require different certificates. ### Deploy our application and HTTPRoute From 2d4a3a6e4d67e6fae91309ac8f680b2d2e97e21c Mon Sep 17 00:00:00 2001 From: Fedello <31769405+pvillaverde@users.noreply.github.com> Date: Wed, 29 Jul 2026 10:43:55 +0200 Subject: [PATCH 2/2] Update content/ngf/traffic-security/integrate-cert-manager.md Co-authored-by: yar --- content/ngf/traffic-security/integrate-cert-manager.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/ngf/traffic-security/integrate-cert-manager.md b/content/ngf/traffic-security/integrate-cert-manager.md index 4e3694830..1c0a49661 100644 --- a/content/ngf/traffic-security/integrate-cert-manager.md +++ b/content/ngf/traffic-security/integrate-cert-manager.md @@ -144,7 +144,7 @@ cafe-secret kubernetes.io/tls 2 20s ``` --- -- Multiple `certificateRefs` apply to the Listener's `hostname` and are not automatically selected based on the hostnames of attached HTTPRoute resources. Use separate HTTPS Listeners for different domains that require different certificates. +- Multiple `certificateRefs` apply to the listener's `hostname` and are not automatically selected based on the hostnames of attached HTTPRoute resources. Use separate HTTPS listeners for different domains that require different certificates. ### Deploy our application and HTTPRoute