mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-08 21:14:56 +09:00
ECDSA P-256 keys offer equivalent or better security than RSA-4096 with significantly smaller key material and faster handshake operations. Both CA and leaf certificates are updated; existing rotation policies are preserved (Never for CA, Always for leaf). Note: cert-manager will re-issue both CA and leaf on next reconcile. Existing trust anchors that pin the CA cert will break; tenants must refresh their ca.crt after upgrading. Assisted-by: LLM Signed-off-by: Arsolitt <arsolitt@gmail.com>
How to test packages local
cd packages/core/installer
make image-cozystack REGISTRY=YOUR_CUSTOM_REGISTRY
make apply
kubectl delete po -l app=source-controller -n cozy-fluxcd