mirror of
https://github.com/cozystack/cozystack.git
synced 2026-10-29 16:17:20 +09:00
An image behind an authenticated endpoint could not be imported: the http source took a bare URL, so the only way to hand CDI credentials was a pre-signed URL that anyone holding it could use until it expired. The source gains secretExtraHeaders, the names of Secrets in the release namespace each holding one extra request header, and certConfigMap, a ConfigMap with the CA bundle to trust, both passed to the DataVolume as CDI defines them. The immutability guard treats a stored http source with these keys as chart-shaped, so a later change to them is refused like a URL change; a stored key the chart never renders still marks a foreign source it leaves alone. Assisted-by: LLM Signed-off-by: Timofei Larkin <lllamnyp@gmail.com>