mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 14:02:56 +09:00
The comment sent operators to a ca.crt key in <release>-credentials. That Secret is rendered by this chart from .Values.users and carries password entries only, so there is nothing in it to verify a server certificate against. The anchor a tenant can reach is the key-free <release>.tenant-ca that the CA extraction controller publishes from the sentinel this chart renders, delivered through the tenantsecrets API. Assisted-by: LLM Signed-off-by: Aleksei Sviridkin <f@lex.la>