mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 22:13:18 +09:00
Andrei Kvapil
2a73909776
Backport of #3955. The automated cherry-pick carried only the first commit of that PR and committed the values.yaml conflict, so this resolution brings the branch to what actually merged to main: the port comes from a single helper feeding the container port, the Service targetPort and the policy, the rationale sits in template comments rather than being rendered into every manifest, and the dead egress default-deny toggle is gone. Two deliberate differences from main. The image stays on the digest this release line already ships rather than main's older one, and the --client-ca-file argument is left out along with the values key it reads: both belong to #2698, which was never backported here, and the image on this line does not take the flag. Assisted-By: Claude Signed-off-by: Andrei Kvapil <andrei.kvapil@aenix.io>