Алексей Артамонов 6e093f11bc fix(gateway): clean up orphaned ACME account secret on tenant module delete (#3089) ...

When the gateway tenant module is disabled, cert-manager's ACME account
private-key secret cozystack-acme-account was left orphaned (no ownerRef).
Add a post-delete cleanup hook that deletes it by name. Verified the secret
is referenced only by the gateway module's own cozystack-gateway Issuer, so
removing it on gateway teardown is safe. The cleanup Job runs non-root with a
read-only root fs and dropped capabilities; RBAC is scoped via resourceNames.

Signed-off-by: Алексей Артамонов <aleksei.artamonov@aenix.io>

2026-06-26 17:29:44 +03:00

..

cleanup_acme_test.yaml

fix(gateway): clean up orphaned ACME account secret on tenant module delete (#3089)

2026-06-26 17:29:44 +03:00

tenantgateway_test.yaml

feat(platform,gateway): distribute operator wildcard secret name

2026-06-10 03:08:07 +03:00