mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 05:25:14 +09:00
The previous hasKey-only check treated an explicit null tls.enabled as a real value (false), skipping the external fallback. Add a nil guard so null is handled the same as absent — TLS inherits from .Values.external. Replace the hardcoded cluster.local suffix in cert SANs with the platform-injected _cluster.cluster-domain value (defaulting to cozy.local), consistent with how clickhouse, foundationdb, mongodb, and opensearch resolve the cluster DNS domain. Assisted-by: LLM Signed-off-by: Arsolitt <arsolitt@gmail.com> Signed-off-by: Aleksei Sviridkin <f@lex.la>