fix(k8s): persist Caddy TLS certificates with PVC #981
Closed
AFDudley
wants to merge 4 commits from
caddy-pvc-persistence into main
pull from: caddy-pvc-persistence
merge into: :main
:main
:afd-dumpster-local-testing
:merge-multi-http-proxy
:fix/kind-mount-propagation
:add/local-test-runner
:fix/k8s-port-mappings-v5
:fix/k8s-port-mappings-hostnetwork
:feature/secrets-support
:fix-etcd-drop-stale-acme
:multi-http-proxy
:fix-sidecar-localhost
:feat-namespace-per-deployment
:fix-down-cleanup-by-label
:fix-kind-relative-volume-paths
:fix-init-volumes-merge
:caddy-pvc-persistence
:roysc/deployment-create-sync
:multi-port-service
:helm-charts-with-caddy
:afd
:feat/trashscan-explorer-stack
:helm-charts-support
:vaasl-deploy
:roysc/deploy-create-extra-args
:zach/atom-payments
:zramsay-patch-1
:roysc/deploy-create-pass-cluster
:zach/update-url
:telackey/defaultplatform
:telackey/924
:telackey/laconicdv1
:zach/pin-cli-version
:telackey/wagit
:add-vega-stack
:blast-stack
:lotus-stack
:roysc/fix-eth-stacks
:telackey/na
:telackey/fqdn
:zach/snowdocs
:zach/fixturenet-2d
:telackey/wild
:dboreham/mobymask-v3-demo-test
:zach/fix-for-mars
:ci-test
:optimism-fix
:telackey/envsubst
:dboreham/laconicd-k8s
:zach/birbit
:osmosis
:iskay/update-optimism
:iskay/plugeth-test-update
:iskay/fixturenet-payments-test
:iskay/fixturenet-laconicd-test
:iskay/fixturenet-eth-test
:new-gitea-test
:erc20-fix
:update-uniswap
:tel/1.20
:telackey/systest
:ng-deny-multiaddr
:publish-test
:telackey/datanet
4
Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
  A. F. DudleyandClaude Opus 4.5
|
1473c5ec4d |
Revert local k8s helpers changes
Lint Checks / Run linter (pull_request) Successful in 16s
Lint Checks / Run linter (push) Successful in 16s
K8s Deployment Control Test / Run deployment control suite on kind/k8s (pull_request) Failing after 42s
K8s Deploy Test / Run deploy test suite on kind/k8s (pull_request) Failing after 1m43s
Deploy Test / Run deploy test suite (pull_request) Successful in 2m14s
External Stack Test / Run external stack test suite (push) Failing after 2m16s
Database Test / Run database hosting test on kind/k8s (push) Failing after 3m6s
Webapp Test / Run webapp test suite (pull_request) Successful in 3m45s
Smoke Test / Run basic test suite (pull_request) Successful in 3m45s
The hostPath support fix was merged via Roy's PR #984. Reverting local changes to sync with upstream main. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> |
||
|
A. F. DudleyandClaude Opus 4.5
|
d31f76eb5a |
Add etcd + PKI extraMounts for offline data recovery
Mount /var/lib/etcd and /etc/kubernetes/pki to host filesystem
so cluster state is preserved for offline recovery. Each deployment
gets its own backup directory keyed by deployment ID.
Directory structure:
data/cluster-backups/{deployment_id}/etcd/
data/cluster-backups/{deployment_id}/pki/
This enables extracting secrets from etcd backups using etcdctl
with the preserved PKI certificates.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
||
|
A. F. DudleyandClaude Opus 4.5
|
21d0975e71 |
feat(k8s): support acme-email config for Caddy ingress
Adds support for configuring ACME email for Let's Encrypt certificates in kind deployments. The email can be specified in the spec under network.acme-email and will be used to configure the Caddy ingress controller ConfigMap. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> |
||
|
A. F. DudleyandClaude Opus 4.5
|
411e777980 |
fix(deploy): merge volumes from stack init() instead of overwriting
Previously, volumes defined in a stack's commands.py init() function were being overwritten by volumes discovered from compose files. This prevented stacks from adding infrastructure volumes like caddy-data that aren't defined in the compose files. Now volumes are merged, with init() volumes taking precedence over compose-discovered defaults. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> |