cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-03 10:37:21 +09:00

Files

T

History

Andrey Kolkov 2394424af7 fix(backups): mirror the Redis script's CA trust exactly

The script passes the endpoint CA as curl --cacert, which replaces the
default trust store, while the probe trusted the system roots on top of
it. Trust only the CA, as the script does.

A mounted CA Secret that is still there but no longer carries ca.crt or
tls.crt let the probe skip TLS verification when the strategy opts into
it, although the Job may have verified against a key since removed.
Treat a volume that yields no CA now like a vanished Secret and refuse
to skip verification in its place.

Pin the probe timeout and the reconcile's retry of an unreadable Backup
for Redis with tests.

Assisted-by: LLM
Signed-off-by: Andrey Kolkov <androndo@gmail.com>

2026-10-22 20:13:47 +04:00

apigate

ci(api-gate): report name declarations the API server would refuse

2026-09-24 09:35:10 +03:00

backupcontroller

fix(backups): mirror the Redis script's CA trust exactly

2026-10-22 20:13:47 +04:00

controller

fix(fluxcd): give each release its own share of the hook's retries

2026-10-13 15:09:00 +03:00

cozyvaluesreplicator

refactor: apply the Go 1.27 modernizers