cerc-io/stack-orchestrator
13
1
Fork 3
Code Issues 115 Pull Requests 23 Actions Packages Projects Releases 486 Wiki Activity

fix(k8s): persist Caddy TLS certificates with PVC #981

Open
AFDudley wants to merge 3 commits from caddy-pvc-persistence into main
pull from: caddy-pvc-persistence
merge into: cerc-io:main
Conversation 0 Commits 3 Files Changed 4 +45 -3

3 Commits

Author SHA1 Message Date
A. F. Dudley
1b9204da98 Add etcd + PKI extraMounts for offline data recovery
Some checks failed
Lint Checks / Run linter (push) Successful in 4m35s
Details
Lint Checks / Run linter (pull_request) Successful in 7m46s
Details
Deploy Test / Run deploy test suite (pull_request) Successful in 13m51s
Details
K8s Deploy Test / Run deploy test suite on kind/k8s (pull_request) Failing after 18m29s
Details
K8s Deployment Control Test / Run deployment control suite on kind/k8s (pull_request) Successful in 21m22s
Details
Webapp Test / Run webapp test suite (pull_request) Successful in 24m48s
Details
Smoke Test / Run basic test suite (pull_request) Successful in 25m23s
Details 
Mount /var/lib/etcd and /etc/kubernetes/pki to host filesystem
so cluster state is preserved for offline recovery. Each deployment
gets its own backup directory keyed by deployment ID.

Directory structure:
  data/cluster-backups/{deployment_id}/etcd/
  data/cluster-backups/{deployment_id}/pki/

This enables extracting secrets from etcd backups using etcdctl
with the preserved PKI certificates.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-26 22:00:18 -05:00
A. F. Dudley
aa88adabc1 feat(k8s): support acme-email config for Caddy ingress 
Adds support for configuring ACME email for Let's Encrypt certificates
in kind deployments. The email can be specified in the spec under
network.acme-email and will be used to configure the Caddy ingress
controller ConfigMap.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-26 21:57:44 -05:00
A. F. Dudley
bb44145510 fix(deploy): merge volumes from stack init() instead of overwriting 
Previously, volumes defined in a stack's commands.py init() function
were being overwritten by volumes discovered from compose files.
This prevented stacks from adding infrastructure volumes like caddy-data
that aren't defined in the compose files.

Now volumes are merged, with init() volumes taking precedence over
compose-discovered defaults.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-26 21:57:18 -05:00