help request: How to automatically or force update ApisixTLS?

[Horus-K]

Description

Why doesn't apisix-ingress-controller sync the new certificate to apisix after I regenerate the mywhoami.xxx.ai certificate?
How can I force a certificate update? Business operations cannot be interrupted.
I deployed using config_provider=yaml.

helm install apisix \
  --namespace ingress-apisix \
  --create-namespace \
  --set apisix.deployment.role=traditional \
  --set apisix.deployment.role_traditional.config_provider=yaml \
  --set etcd.enabled=false \
  --set ingress-controller.enabled=true \
  --set ingress-controller.config.provider.type=apisix-standalone \
  --set ingress-controller.apisix.adminService.namespace=ingress-apisix \
  --set ingress-controller.gatewayProxy.createDefault=true \
  apisix/apisix

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: whoami
  namespace: devops
spec:
  dnsNames:
    - mywhoami.xxx.ai
  issuerRef:
    group: cert-manager.io
    kind: ClusterIssuer
    name: letsencrypt-apisix
  secretName: mywhoami.xxx.ai
  usages:
    - digital signature
    - key encipherment

apiVersion: apisix.apache.org/v2
kind: ApisixTls
metadata:
  name: whoami
  namespace: devops
spec:
  hosts:
    - mywhoami.xxx.ai
  ingressClassName: apisix
  secret:
    name: mywhoami.xxx.ai
    namespace: devops

Environment

• APISIX version (run apisix version): 3.14.1-ubuntu
• Operating system (run uname -a):
• OpenResty / Nginx version (run openresty -V or nginx -V):
• etcd version, if relevant (run curl http://127.0.0.1:9090/v1/server_info):
• APISIX Dashboard version, if relevant:
• Plugin runner version, for issues related to plugin runners:
• LuaRocks version, for installation issues (run luarocks --version):

[Baoyuantop]

Hi @Horus-K, starting with APISIX Ingress Controller 2.0.0, the controller is the single source of truth. Manual Admin API changes will be overwritten on the next full sync. The prior approach, which allowed controller-managed and manually added configurations to coexist, was incorrect and is now deprecated.

Therefore, it's impossible to create resources directly on the APISIX side. I see you created apache/apisix-ingress-controller#2673. Let's solve this problem in the ingress.

[Baoyuantop]

This issue has been fixed in the ingress controller.