Andrey Kolkov db545c6e8e fix(backups): never skip TLS verification in place of a vanished CA ...

The Redis probe reads the CA Secret when it runs, not when the backup
Job did. If the pod mounted a CA Secret that has since been deleted and
the strategy also opts into S3_INSECURE_SKIP_VERIFY, the probe skipped
verification against an endpoint the Job may have verified. Refuse to
probe in that case. Without skip-verify a missing CA Secret still falls
back to the system roots, as the script does.

The endpoint comment claimed a bare host; it can carry a path, which the
shared client now refuses.

Assisted-by: LLM
Signed-off-by: Andrey Kolkov <androndo@gmail.com>

2026-11-09 16:52:06 +07:00

..

cnpgtypes

fix(backups): hold a Postgres backup until the plugin rollout is over (#4674)

2026-10-08 13:11:46 +03:00

etcdapp

feat(platform): migrate to etcd-operator v1alpha2

2026-07-06 14:41:33 +04:00

etcdtypes

feat(platform): migrate to etcd-operator v1alpha2

2026-07-06 14:41:33 +04:00

factory

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

foundationdbapp

feat(platform): add implementation of backup-strategy controller for foundationdb

2026-05-13 09:49:19 +04:00

foundationdbtypes

feat(platform): add implementation of backup-strategy controller for foundationdb

2026-05-13 09:49:19 +04:00

kafkatypes

feat(backups): Kafka topic-metadata backup via a dedicated strategy driver

2026-09-10 22:20:27 +04:00

mariadbapp

feat(platform): implement backup strategy for mariadb

2026-05-12 13:56:29 +04:00

mariadbtypes

fix(backups): keep a MariaDB restore target's accounts

2026-09-24 18:11:07 +03:00

mongodbapp

fix(mongodb): key system-bucket injection off the app flag, not live storage

2026-09-22 12:03:58 +04:00

postgresapp

fix(backups, postgres): refuse a restore into another PostgreSQL major (#4669)

2026-10-06 16:35:27 +03:00

psmdbtypes

fix(mongodb): start a backup only once the operator has pushed the storage into pbm

2026-09-29 11:02:57 +04:00

rabbitmqtypes

feat(backups): add RabbitMQ definitions backup via a dedicated strategy driver

2026-09-01 18:21:10 +04:00

altinitystrategy_controller_test.go

fix(backups): fail a ClickHouse BackupJob whose Backup name is taken

2026-11-05 07:56:44 +00:00

altinitystrategy_controller.go

fix(backups): fail a ClickHouse BackupJob whose Backup name is taken

2026-11-05 07:56:44 +00:00

artifact_size_test.go

feat(backups): record the RDB snapshot location and size for Redis backups

2026-11-09 16:52:06 +07:00

artifact_size.go

fix(backups): probe the Redis snapshot with the trust its Job used

2026-11-09 16:52:06 +07:00

backup_controller_test.go

feat(backups): back up Valkey with the Redis strategy

2026-10-13 12:34:24 +04:00

backup_controller.go

fix(mongodb): own and prune the system-bucket archive, and heal the restore read path

2026-09-22 12:03:58 +04:00

backupclass_resolver_test.go

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

backupclass_resolver.go

feat(platform): add default backupclass

2026-05-28 13:49:59 +04:00

backupjob_controller_test.go

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

backupjob_controller.go

fix(backups): report sizeBytes for CNPG backup artifacts

2026-11-04 13:04:22 +00:00

backupjob_restore_lock_test.go

fix(backups): match a Velero restore in its Backup's API group

2026-09-29 09:38:36 +02:00

backupjob_restore_lock.go

fix(backups): match a Velero restore in its Backup's API group

2026-09-29 09:38:36 +02:00

bootstrap_disable_patch_test.go

fix(backups): let a restored Postgres app converge its credentials

2026-09-24 18:11:07 +03:00

cnpg_artifact_size_test.go

fix(backups): trust only the endpoint CA where the backup writer does

2026-11-04 13:04:23 +00:00

cnpg_artifact_size.go

fix(backups): trust only the endpoint CA where the backup writer does

2026-11-04 13:04:23 +00:00

cnpgstrategy_controller_test.go

fix(backups): keep the CNPG purge for unmarked Clusters this restore did not render

2026-10-10 23:49:09 +03:00

cnpgstrategy_controller.go

fix(backups): surface a Backup that cannot be read back and skip its probe

2026-11-04 13:04:22 +00:00

credentials_projector_runnable.go

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

credentials_projector_test.go

feat(platform): add default backupclass

2026-05-28 13:49:59 +04:00

credentials_projector.go

docs: move the repo-only guides onto the website

2026-10-21 17:50:46 +05:00

default_objects_gate_test.go

fix(backups): keep forcing objects that still lack the endpoint annotation

2026-11-08 20:18:29 +03:00

default_objects_gate.go

fix(backups): keep forcing objects that still lack the endpoint annotation

2026-11-08 20:18:29 +03:00

etcdstrategy_controller_test.go

chore: drop private cluster, host and personal names from the tree

2026-10-07 04:38:06 +03:00

etcdstrategy_controller.go

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

foundationdbstrategy_controller_test.go

feat(platform): add implementation of backup-strategy controller for foundationdb

2026-05-13 09:49:19 +04:00

foundationdbstrategy_controller.go

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

jobstrategy_controller_test.go

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

jobstrategy_controller.go

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

kafkastrategy_controller_test.go

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

kafkastrategy_controller.go

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

legacy_password_scrubber_test.go

fix(postgres): refuse a physical restore across image flavors

2026-10-01 18:31:18 +02:00

legacy_password_scrubber.go

fix(backups): scrub legacy plaintext passwords from CNPG Backup snapshots

2026-09-29 11:21:08 +04:00

mariadb_artifact_size_test.go

fix(backups): attribute a MariaDB dump only when no other run can own it

2026-11-04 13:24:09 +00:00

mariadb_artifact_size.go

fix(backups): attribute a MariaDB dump only when no other run can own it

2026-11-04 13:24:09 +00:00

mariadbstrategy_controller_test.go

fix(backups): keep a MariaDB restore target's accounts

2026-09-24 18:11:07 +03:00

mariadbstrategy_controller.go

fix(backups): read a MariaDB dump from where its operator Backup wrote it

2026-11-04 13:18:39 +00:00

plan_controller.go

feat(backups): implement interface changes related backups class introduction

2026-01-22 10:39:33 +04:00

psmdbstrategy_controller_test.go

fix(mongodb): start a backup only once the operator has pushed the storage into pbm

2026-09-29 11:02:57 +04:00

psmdbstrategy_controller.go

docs: move the repo-only guides onto the website

2026-10-21 17:50:46 +05:00

rabbitmqstrategy_controller_test.go

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

rabbitmqstrategy_controller.go

refactor: apply the Go 1.27 modernizers

2026-09-24 17:23:18 +03:00

reconcilers_test.go

feat(platform): add default backupclass

2026-05-28 13:49:59 +04:00

redis_artifact_size_test.go

fix(backups): never skip TLS verification in place of a vanished CA

2026-11-09 16:52:06 +07:00

redis_artifact_size.go

fix(backups): never skip TLS verification in place of a vanished CA

2026-11-09 16:52:06 +07:00

redisstrategy_controller_test.go

feat(backups): back up Valkey with the Redis strategy

2026-10-13 12:34:24 +04:00

redisstrategy_controller.go

fix(backups): probe the Redis snapshot with the trust its Job used

2026-11-09 16:52:06 +07:00

restorejob_controller_test.go

fix(backups): harden Kafka metadata backup

2026-09-10 22:21:24 +04:00

restorejob_controller.go

fix(backups): refuse a restore into an application another restore holds

2026-10-10 23:49:08 +03:00

restorejob_target_lock_test.go

fix(backups): name the restore that goes first in ConcurrentRestore

2026-10-10 23:49:09 +03:00

restorejob_target_lock.go

fix(backups): name the restore that goes first in ConcurrentRestore

2026-10-10 23:49:09 +03:00

stale_cache_test.go

test(backups): give the restore stale-cache test a Completed Velero Backup

2026-10-08 14:09:08 +02:00

velerostrategy_controller_test.go

fix(backups): prepare standalone VMDisk restore targets before the data mover runs

2026-10-13 18:05:45 +04:00

velerostrategy_controller.go

fix(backups): report sizeBytes for MariaDB backup artifacts

2026-11-04 13:04:22 +00:00

velerostrategy_disk_in_use_test.go

fix(backups): prepare standalone VMDisk restore targets before the data mover runs

2026-10-13 18:05:45 +04:00

velerostrategy_vmdisk_restore_test.go

fix(backups): prepare standalone VMDisk restore targets before the data mover runs

2026-10-13 18:05:45 +04:00