mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-13 08:05:19 +09:00
When TLS is enabled the operator publishes a CA-only Secret derived from the leaf TLS Secret, but the ClusterRole only granted get on secrets, so reconciling a TLS-enabled RedisFailover failed with a forbidden error and the CA secret was never created. Grant the operator full management of secrets, matching the other resources it owns. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Arsolitt <arsolitt@gmail.com>