cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-03 10:37:21 +09:00

Files

T

Aleksei Sviridkin 36ee8a2608 feat(rabbitmq): make TLS opt-in instead of following external

tls.enabled inherited the value of external when unset, so enabling
external access also enabled TLS. That is not free on an existing
instance: setting spec.tls.secretName makes the operator rewrite the
port key of the <release>-default-user Secret from 5672 to 5671, and
that Secret is the Service Binding handed to the tenant. Every client
resolving its endpoint from the binding — the documented way — would
move onto TLS on upgrade and have to verify a per-release CA it has no
key-free way to obtain.

Resolve unset, null and false to false instead, so TLS is only ever on
because someone asked for it. enabled becomes a plain bool now that
there is no third state to express.

Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-09-04 11:18:45 +03:00

api-rules

fix(api): regenerate OpenAPI with code-generator v0.35.0

2026-07-16 16:45:17 +05:00

apps/v1alpha1

feat(rabbitmq): make TLS opt-in instead of following external

2026-09-04 11:18:45 +03:00

backups

feat(backups): add a native MongoDB (psmdb) backup-strategy driver

2026-08-12 12:00:33 +04:00

gateway/v1alpha1

feat(tenantgateway): add existingSecret cert mode for operator wildcard