Fix Caddy ingress ACME email and RBAC issues

Archived

- Add acme_email_key constant for spec.yml parsing
- Add get_acme_email() method to Spec class
- Modify install_ingress_for_kind() to patch ConfigMap with email
- Pass acme-email from spec to ingress installation
- Add 'delete' verb to leases RBAC for certificate lock cleanup

The acme-email field in spec.yml was previously ignored, causing
Let's Encrypt to fail with "unable to parse email address".
The missing delete permission on leases caused lock cleanup failures.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

This commit is contained in:

A. F. Dudley

2026-02-03 17:15:19 -05:00

co-authored by

Claude Opus 4.5

parent c197406cc7

commit 8d3191e4fd

5 changed files with 22 additions and 2 deletions

									
										stack_orchestrator/data/k8s/components/ingress/ingress-caddy-kind-deploy.yaml
									
		+1
		
												View File
												
				@@ -93,6 +93,7 @@ rules:

				      - get

				      - create

				      - update

				      - delete

				---

				apiVersion: rbac.authorization.k8s.io/v1

				kind: ClusterRoleBinding