rt-manager.io/cluster-issuer=letsencrypt-prod

# Test external access
curl -v https://josie.lol
echo | openssl s_client -connect josie.lol:443 -servername josie.lol 2>/dev/null | openssl x509 -noout -dates
```

## Lessons Learned
- cert-manager successfully renewed the internal certificate
- Route integration with cert-manager requires specific configuration
- External certificate serving depends on proper route TLS configuration
- Feature gates may be required for automatic cert-manager route integration