cozystack

0 Fork 0

mirror of https://github.com/cozystack/cozystack.git synced 2026-11-06 20:13:43 +09:00

Files

T

Aleksei Sviridkin 6e219c241b feat(platform,gateway): distribute operator wildcard secret name

Add publishing.certificates.wildcardSecretName to the platform chart
and propagate it through the cozystack-values channel as
_cluster.wildcard-secret-name. Only the Secret NAME travels — the
cert/key material is never broadcast, unlike the public kube-root-ca
that already rides this channel.

When the key is set, the gateway chart switches the rendered
TenantGateway to certMode=existingSecret with a wildcardSecretRef
pointing at the operator-supplied Secret, and skips the ACME
solver/provider/issuer validations that no longer apply. Wildcard mode
takes precedence over solver=dns01. TLS-passthrough services and
attached namespaces continue to render unchanged.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Aleksei Sviridkin <f@lex.la>

2026-06-10 03:08:07 +03:00

apps_dns01_wiring_test.yaml

feat: Gateway API support via Cilium

2026-05-25 17:07:02 +03:00

apps_proxy_protocol_wiring_test.yaml

fix(platform): deliver publishing.proxyProtocol to host ingress-nginx

2026-06-09 12:50:53 +03:00

apps_wildcard_secret_test.yaml

feat(platform,gateway): distribute operator wildcard secret name

2026-06-10 03:08:07 +03:00

bundles_gpu_kubevirt_wiring_test.yaml

fix(platform): drop fragile numeric vGPU mediatedDeviceTypes defaults