mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-08 21:14:56 +09:00
Uninstall removes the cert-manager Secrets now, but turning managed TLS off while the instance keeps running does not: the post-delete hook does not run on an upgrade, and cert-manager does not own what it issued. The note said the Secrets stay behind without saying what to do about it. Not automating this on upgrade is deliberate. A hook that deletes Secrets on every reconcile, including for instances that never had TLS, is a worse thing to get wrong than an inert Secret that no tenant grant exposes and nothing reads. Signed-off-by: Aleksei Sviridkin <f@lex.la>