Files
cozystack/packages
Aleksei Sviridkin f1d5621bfb docs(mariadb): give the command for the keys left by turning TLS off
Uninstall removes the cert-manager Secrets now, but turning managed TLS
off while the instance keeps running does not: the post-delete hook does
not run on an upgrade, and cert-manager does not own what it issued. The
note said the Secrets stay behind without saying what to do about it.

Not automating this on upgrade is deliberate. A hook that deletes Secrets
on every reconcile, including for instances that never had TLS, is a
worse thing to get wrong than an inert Secret that no tenant grant
exposes and nothing reads.

Signed-off-by: Aleksei Sviridkin <f@lex.la>
2026-09-03 01:38:43 +03:00
..