Алексей Артамонов 58b2a3d779 fix(bucket): harden ACME cleanup hook and fix cert-manager label selector ...

Address review feedback on the post-delete cleanup hook:

- Target Orders/Challenges by cert-manager's own
  cert-manager.io/certificate-name=<release>-ui-tls label instead of the
  Helm app.kubernetes.io/instance label, which cert-manager never sets on
  those resources (the old selector was a silent no-op).
- Bound the Job with activeDeadlineSeconds=120 and backoffLimit=0 so a
  stuck finalizer or hung API call cannot block the uninstall.
- Add --wait=false --request-timeout=30s to every kubectl delete/get so
  the hook never hangs on slow or finalizer-blocked deletes.
- Surface list failures in the job log instead of redirecting to
  /dev/null.
- Tests: assert the bounded execution and security-hardening contract,
  pin the rendered document count to 4, and update selector assertions.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Алексей Артамонов <alexeyartamonov1987@gmail.com>

2026-06-26 14:36:47 +03:00

..

apps

fix(bucket): harden ACME cleanup hook and fix cert-manager label selector

2026-06-26 14:36:47 +03:00

core

chore(testing): refresh e2e-sandbox tools and base to current upstream (#3010)

2026-06-23 13:14:20 +03:00

extra

feat(ingress): issue shared DNS-01 wildcard on the publishing controller

2026-06-22 20:01:40 +03:00

library

feat(cozy-lib): add CA-only TLS trust-anchor helper for tenants

2026-06-23 03:12:17 +03:00

system

feat(harbor): bump chart to 1.19.1 (Harbor 2.15.1) (#2966)

2026-06-23 14:32:43 +03:00

tests/cozy-lib-tests

feat(cozy-lib): add CA-only TLS trust-anchor helper for tenants

2026-06-23 03:12:17 +03:00