Remove defaultTLS option

charms/worker/k8s/charmcraft.yaml

@@ -218,15 +218,6 @@ config:
       default: false
       description: |
         Determines if the ingress feature should be enabled.
-    ingress-default-tls-secret:
-      type: string
-      default: ""
-      description: |
-        Sets the name of the kubernetes secret to be used for providing default encryption to
-        ingresses.
-        This secret should be in the `kube-system` namespace.
-        Ingresses can specify another TLS secret in their resource definitions,
-        in which case the default secret won't be used.
     ingress-enable-proxy-protocol:
       type: boolean
       default: false

charms/worker/k8s/src/charm.py

@@ -430,7 +430,6 @@ def _assemble_cluster_config(self) -> UserFacingClusterConfig:
 
         ingress = IngressConfig(
             enabled=self.config.get("ingress-enabled"),
-            default_tls_secret=self.config.get("ingress-default-tls-secret"),
             enable_proxy_protocol=self.config.get("ingress-enable-proxy-protocol"),
         )
 

charms/worker/k8s/tests/unit/test_config_options.py

@@ -65,13 +65,10 @@ def test_configure_ingress_options(harness):
 
     enabled = True
     proxy_protocol_enabled = True
-    default_tls_secret = "my-secret"
 
     harness.update_config({"ingress-enabled": enabled})
     harness.update_config({"ingress-enable-proxy-protocol": proxy_protocol_enabled})
-    harness.update_config({"ingress-default-tls-secret": default_tls_secret})
 
     ufcg = harness.charm._assemble_cluster_config()
     assert ufcg.ingress.enabled == enabled
     assert ufcg.ingress.enable_proxy_protocol == proxy_protocol_enabled
-    assert ufcg.ingress.default_tls_secret == default_tls_secret