mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 05:25:14 +09:00
Алексей Артамонов
6e093f11bc
When the gateway tenant module is disabled, cert-manager's ACME account private-key secret cozystack-acme-account was left orphaned (no ownerRef). Add a post-delete cleanup hook that deletes it by name. Verified the secret is referenced only by the gateway module's own cozystack-gateway Issuer, so removing it on gateway teardown is safe. The cleanup Job runs non-root with a read-only root fs and dropped capabilities; RBAC is scoped via resourceNames. Signed-off-by: Алексей Артамонов <aleksei.artamonov@aenix.io>
11 lines
161 B
Makefile
11 lines
161 B
Makefile
NAME=gateway
|
|
|
|
include ../../../hack/package.mk
|
|
|
|
generate:
|
|
cozyvalues-gen -v values.yaml -s values.schema.json -r README.md
|
|
|
|
.PHONY: test
|
|
test:
|
|
helm unittest .
|