mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-13 08:05:19 +09:00
When the chart supplies the cert via spec.tls.certificateSecret, the operator stops generating SANs, so redis_exporter dialing rediss://127.0.0.1 fails CA verification because a "localhost" DNS SAN does not match an IP literal. Add 127.0.0.1 and ::1 ipAddresses to the leaf Certificate, mirroring the operator's own self-generated cert. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Arsolitt <arsolitt@gmail.com>
How to test packages local
cd packages/core/installer
make image-cozystack REGISTRY=YOUR_CUSTOM_REGISTRY
make apply
kubectl delete po -l app=source-controller -n cozy-fluxcd