mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-08 21:14:56 +09:00
Myasnikov Daniil
2b6e20cc3f
ClusterIssuer solver referenced IngressClass "nginx" which does not exist on cozystack clusters — real classes are named after tenant namespaces (e.g. tenant-root). Cert issuance only worked because every requesting Ingress overrode the ClusterIssuer via the legacy acme.cert-manager.io/http01-ingress-class annotation. Switch both sides to the modern cert-manager API (available since cert-manager 1.12; cozystack ships 1.19.3): - ClusterIssuer: http01.ingress.ingressClassName, value parameterized from _cluster.expose-ingress (default "tenant-root") - Ingress annotation: http01-ingress-ingressclassname These must migrate together — mixing ingressClassName (ClusterIssuer) with the old http01-ingress-class annotation triggers cert-manager's "fields ingressClassName and class cannot be set at the same time" validation and breaks issuance. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>
BootBox
Parameters
Common parameters
| Name | Description | Type | Value |
|---|---|---|---|
whitelistHTTP |
Secure HTTP by enabling client networks whitelisting. | bool |
true |
whitelist |
List of client networks. | []string |
[] |
machines |
Configuration of physical machine instances. | []object |
[] |
machines[i].hostname |
Hostname. | string |
"" |
machines[i].arch |
Architecture. | string |
"" |
machines[i].ip |
IP address configuration. | object |
{} |
machines[i].ip.address |
IP address. | string |
"" |
machines[i].ip.gateway |
IP gateway. | string |
"" |
machines[i].ip.netmask |
Netmask. | string |
"" |
machines[i].leaseTime |
Lease time. | int |
0 |
machines[i].mac |
MAC addresses. | []string |
[] |
machines[i].nameServers |
Name servers. | []string |
[] |
machines[i].timeServers |
Time servers. | []string |
[] |
machines[i].uefi |
UEFI. | bool |
false |