fix(k8s): drop stale ACME accounts during etcd cleanup #991
Open
AFDudley
wants to merge 1 commits from
fix-etcd-drop-stale-acme into main
pull from: fix-etcd-drop-stale-acme
merge into: cerc-io:main
cerc-io:main
cerc-io:multi-http-proxy
cerc-io:fix-sidecar-localhost
cerc-io:feat-namespace-per-deployment
cerc-io:fix-down-cleanup-by-label
cerc-io:fix-kind-relative-volume-paths
cerc-io:fix-init-volumes-merge
cerc-io:caddy-pvc-persistence
cerc-io:roysc/deployment-create-sync
cerc-io:multi-port-service
cerc-io:helm-charts-with-caddy
cerc-io:afd
cerc-io:feat/trashscan-explorer-stack
cerc-io:helm-charts-support
cerc-io:vaasl-deploy
cerc-io:roysc/deploy-create-extra-args
cerc-io:zach/atom-payments
cerc-io:zramsay-patch-1
cerc-io:roysc/deploy-create-pass-cluster
cerc-io:zach/update-url
cerc-io:telackey/defaultplatform
cerc-io:telackey/924
cerc-io:telackey/laconicdv1
cerc-io:zach/pin-cli-version
cerc-io:telackey/wagit
cerc-io:add-vega-stack
cerc-io:blast-stack
cerc-io:lotus-stack
cerc-io:roysc/fix-eth-stacks
cerc-io:telackey/na
cerc-io:telackey/fqdn
cerc-io:zach/snowdocs
cerc-io:zach/fixturenet-2d
cerc-io:telackey/wild
cerc-io:dboreham/mobymask-v3-demo-test
cerc-io:zach/fix-for-mars
cerc-io:ci-test
cerc-io:optimism-fix
cerc-io:telackey/envsubst
cerc-io:dboreham/laconicd-k8s
cerc-io:zach/birbit
cerc-io:osmosis
cerc-io:iskay/update-optimism
cerc-io:iskay/plugeth-test-update
cerc-io:iskay/fixturenet-payments-test
cerc-io:iskay/fixturenet-laconicd-test
cerc-io:iskay/fixturenet-eth-test
cerc-io:new-gitea-test
cerc-io:erc20-fix
cerc-io:update-uniswap
cerc-io:tel/1.20
cerc-io:telackey/systest
cerc-io:ng-deny-multiaddr
cerc-io:publish-test
cerc-io:telackey/datanet
1 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
A. F. Dudley
|
6a2f2a5dde |
fix(k8s): drop stale ACME accounts during etcd cleanup
Some checks failed
Lint Checks / Run linter (push) Successful in 13s
Lint Checks / Run linter (pull_request) Successful in 16s
Smoke Test / Run basic test suite (pull_request) Successful in 1m23s
K8s Deployment Control Test / Run deployment control suite on kind/k8s (pull_request) Failing after 1m53s
K8s Deploy Test / Run deploy test suite on kind/k8s (pull_request) Failing after 2m7s
Webapp Test / Run webapp test suite (pull_request) Successful in 2m8s
Deploy Test / Run deploy test suite (pull_request) Successful in 2m17s
_clean_etcd_keeping_certs() preserved ALL caddy-system secrets across cluster recreations, including ACME account secrets registered with wrong/empty email. Caddy reuses these stale accounts instead of registering fresh ones, causing recurring "unable to parse email address" errors. Filter the etcd restore loop to only keep certificate secrets (keys matching *certificates*). ACME accounts, OCSP staples, and locks are transient and get recreated automatically by Caddy on startup. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> |