Aleksei Sviridkin 858c1c04fe feat(postgres): declare the tenant CA trust anchor ...

CloudNativePG stores its self-signed CA in <release>-ca alongside the
private key and offers no way to label it, so a tenant cannot be handed
the trust anchor without also being handed the key. Render a
TenantProjection that lifts ca.crt alone into the key-free
<release>.tenant-ca Secret, and select that label from the postgres
tenant-resource definition so the projection is served through the
tenantsecrets API. Document the new retrieval path in the chart README.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-07-21 23:59:48 +03:00

..

cozyrds

feat(postgres): declare the tenant CA trust anchor

2026-07-21 23:59:48 +03:00

templates

refactor: split cozystack-resource-definitions into separate packages

2025-12-30 14:00:31 +01:00

Chart.yaml

refactor: split cozystack-resource-definitions into separate packages

2025-12-30 14:00:31 +01:00

Makefile

refactor: move scripts to hack directory

2026-01-15 16:06:56 +01:00

values.yaml

refactor: split cozystack-resource-definitions into separate packages

2025-12-30 14:00:31 +01:00