cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-03 02:27:01 +09:00

Files

T

History

Andrey Kolkov ad105a06b9 fix(backups): trust only the endpoint CA where the backup writer does

With an endpoint CA the probe trusted the system roots plus that CA.
barman-cloud gets endpointCA as AWS_CA_BUNDLE, which replaces the
default trust store, so a CNPG probe could accept an endpoint the backup
itself would have refused. Let the connection say whether the CA adds to
the system roots or replaces them, and replace them for CNPG.
mariadb-operator appends its CA to the system pool, so MariaDB keeps
that.

Pin in reconcile tests that a Create the apiserver rejects still fails
the BackupJob, so only the read-back of an existing Backup is retried.

Assisted-by: LLM
Signed-off-by: Andrey Kolkov <androndo@gmail.com>

2026-10-22 20:10:50 +04:00

apigate

ci(api-gate): report name declarations the API server would refuse

2026-09-24 09:35:10 +03:00

backupcontroller

fix(backups): trust only the endpoint CA where the backup writer does

2026-10-22 20:10:50 +04:00

controller

fix(fluxcd): give each release its own share of the hook's retries

2026-10-13 15:09:00 +03:00

cozyvaluesreplicator

refactor: apply the Go 1.27 modernizers