for ACME plugin, what's the best practice for updating domains

[MarkYQJ]

An ACME plugin (KongClusterPlugin) with below configuration is deployed.

apiVersion: configuration.konghq.com/v1
kind: KongClusterPlugin
metadata:
  name: acme-kongclusterplugin
  labels:
    global: "true"
config: 
  domains:
  - a.b.c.d
plugin: acme

When here comes another domain e.f.g.h, the creation of another ACME plugin will failed (reported by kong ingress)

level=error msg="multiple KongPlugin definitions found with 'global' label for 'acme', the plugin will not be applied"

Based on the error message, I think the only way to add "e.f.g.h" to hosts is to update current configuration.
Because both KongClusterPlugin CRs are applied without any complain from k8s, it's totally related to KIC design.
May I know what's the best practice for updating domains (including domain addition and deletion)

Thank you

[shaneutt]

Unfortunately there's really no other options than what you've already described. You have to update them in the existing configuration and manage them within a single resource.

If you're interested in improvements to this, we would be happy to consider a feature request in this regard.

[MarkYQJ]

Got it.

Another question, the document says manually delete those certificates after testing.
The certs are stored in config.storage; in my case (run KongIngressController in DB mode, with postgreSQL DB), it's in kong; may I know how to delete certificates? just connect to postgreSQL, database kong, table acme_storage, and remove?

[shaneutt]

Personally I'm not certain. This being the repository for the ingress controller it's not always the best place for some areas of deep knowledge around specific plugins. I might suggest asking in kong/kong discussions about this one: https://github.com/Kong/kong/discussions

[MarkYQJ]

Understand. I will check there.