mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 05:25:14 +09:00
DataStore references TLS Secrets (etcd-ca-tls, etcd-client-tls) that are created as pre-install hooks but remain empty until cert-manager processes the Certificate CRs and populates them. Creating DataStore immediately during install creates a race condition: - Helm creates empty Secrets (pre-install hook) - Helm creates Certificate CRs - Helm creates DataStore (references Secrets) - cert-manager asynchronously populates Secrets - Kamaji webhook validates DataStore TLS config - Validation fails if Secrets are still empty - DataStore creation fails silently Using post-install hook with weight 10 ensures DataStore is created AFTER all other resources (including Certificates), giving cert-manager time to populate the Secrets before DataStore references them. Complements atomic install fix in tenant chart. Related to #2412. Signed-off-by: IvanHunters <xorokhotnikov@gmail.com>