Both gateways declared a host and no tls, so cert-manager was never asked for a
certificate and the ingress answered with its own default self-signed one.
Every client fails the handshake before a route is ever consulted: curl reports
"unable to get local issuer certificate" and the connection ends there, which
reads as the API being down rather than untrusted.
api.lux.network already carries this block; testnet and devnet are the two that
were missing it, on the same ingress, which is why explore.lux.network answers
on that address and these two do not.
Co-authored-by: Hanzo Dev <[email protected]>