mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-03 18:47:04 +09:00
Re-vendors the openbao-helm chart from 0.25.3 to 0.25.7 (app v2.5.0 -> v2.5.1), the latest in the ^0.25 line the Makefile pins, picking up the v2.5.1 security fix. cozystack overrides (injector + csi disabled) stay valid and render nothing, so the changed surface is the openbao server StatefulSet image only. Widening past 0.25.x to 0.28.x (app v2.5.5) would need a CHART_VERSION constraint change plus a 0.26/0.27/0.28 changelog review and is intentionally left out. Adds helm-unittest coverage (the package shipped none): pins the server image and the injector/csi-disabled invariants. Adaptations: - charts/: re-vendored via make update (helm pull openbao ^0.25 -> 0.25.7) - Makefile: add test target - tests/openbao_test.yaml: new helm-unittest coverage Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Aleksei Sviridkin <f@lex.la>