Алексей Артамонов 4b9d67f324 fix(kubernetes): clear kamaji datastore-secret finalizer to unblock namespace deletion (#3062) ...

After deleting a Kubernetes app/tenant, the <release>-datastore-config
Secret kept the finalizer finalizer.kamaji.clastix.io/datastore-secret,
blocking deletion of the whole namespace. Extend the pre-delete hook to wait
for the TenantControlPlane to be removed (so Kamaji can strip the finalizer
itself), then, as a backstop, clear the finalizer on the datastore-config
Secret if it still lingers. RBAC is scoped via resourceNames to that one
Secret (get/patch). The Job runs non-root with a read-only root fs, dropped
capabilities and a writable /tmp for the kubectl cache; failures are logged.

Signed-off-by: Алексей Артамонов <aleksei.artamonov@aenix.io>

2026-06-26 13:03:02 +03:00

..

apps

fix(kubernetes): clear kamaji datastore-secret finalizer to unblock namespace deletion (#3062)

2026-06-26 13:03:02 +03:00

core

chore(testing): refresh e2e-sandbox tools and base to current upstream (#3010)

2026-06-23 13:14:20 +03:00

extra

feat(ingress): issue shared DNS-01 wildcard on the publishing controller

2026-06-22 20:01:40 +03:00

library

feat(cozy-lib): add CA-only TLS trust-anchor helper for tenants

2026-06-23 03:12:17 +03:00

system

feat(harbor): bump chart to 1.19.1 (Harbor 2.15.1) (#2966)

2026-06-23 14:32:43 +03:00

tests/cozy-lib-tests

feat(cozy-lib): add CA-only TLS trust-anchor helper for tenants

2026-06-23 03:12:17 +03:00