I unfortunately agree :( I wanted to use LE, but I really didn’t want a bunch of extra infrastructure. I ended up ponying up for a domain cert. It was expensive, but it’s really easy for all of my k8s Ingress/IngressRoute/HTTPProxy objects to use it.