mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-06 12:03:39 +09:00
Aleksei Sviridkin
9e3ae7447b
Dropping the whole tls block in wildcard mode disabled the forced HTTP-to-HTTPS redirect: ingress-nginx only issues the 308 redirect when TLS is enabled for the Ingress, while a host without a tls section is still served on 443 with the default certificate but stays reachable over plain HTTP. Keep the tls section with the host list and omit only the per-host secretName, so ingress-nginx falls back to the operator wildcard configured as the default SSL certificate and the redirect stays enforced, matching the non-wildcard behaviour. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Aleksei Sviridkin <f@lex.la>
BootBox
Parameters
Common parameters
| Name | Description | Type | Value |
|---|---|---|---|
whitelistHTTP |
Secure HTTP by enabling client networks whitelisting. | bool |
true |
whitelist |
List of client networks. | []string |
[] |
machines |
Configuration of physical machine instances. | []object |
[] |
machines[i].hostname |
Hostname. | string |
"" |
machines[i].arch |
Architecture. | string |
"" |
machines[i].ip |
IP address configuration. | object |
{} |
machines[i].ip.address |
IP address. | string |
"" |
machines[i].ip.gateway |
IP gateway. | string |
"" |
machines[i].ip.netmask |
Netmask. | string |
"" |
machines[i].leaseTime |
Lease time. | int |
0 |
machines[i].mac |
MAC addresses. | []string |
[] |
machines[i].nameServers |
Name servers. | []string |
[] |
machines[i].timeServers |
Time servers. | []string |
[] |
machines[i].uefi |
UEFI. | bool |
false |