Ivan Okhotnikov 9dc64b9278 feat(platform): VPA depends on cert-manager after admission-controller TLS migration ...

The VPA admission-controller webhook TLS is now provisioned via a
cert-manager Certificate + Issuer instead of the in-chart genCA
Secret. On a fresh install the VPA package must not reconcile until
cert-manager is Ready; otherwise the Certificate resource sits
Pending forever, the admission-controller Secret is never written,
and the pod CrashLoops on missing TLS mount — cascading up through
the cozystack-platform PackageSource in exactly the way the old
genCA path did, only for a different reason.

Add cozystack.cert-manager to the variant's dependsOn list. Verified
non-circular against packages/core/platform/sources/cert-manager.yaml
(cert-manager depends on cozystack.networking + cozystack.gateway-api-crds,
neither of which reaches VPA).

Signed-off-by: Ivan Okhotnikov <ivan.okhotnikov@aenix.io>

2026-07-02 18:57:01 +03:00

..

flux-aio

fix(flux): tune source-watcher concurrency and CPU under load

2026-07-01 07:42:33 +03:00

installer

fix(operator): address review feedback on private platform source

2026-06-24 23:22:54 +03:00

platform

feat(platform): VPA depends on cert-manager after admission-controller TLS migration

2026-07-02 18:57:01 +03:00

talos

chore(talos): bump core/talos to Talos v1.13.5 and matchbox v0.11.0

2026-06-23 01:40:23 +03:00

testing

chore(testing): refresh e2e-sandbox tools and base to current upstream

2026-06-23 02:23:39 +03:00