Go to file

OdooSky v3 d602063448 chart 0.7.3 — slug-suffix per-tenant ClusterIssuer (qsoft2 SSL fix)

cluster-issuer.yaml: name → letsencrypt-prod-{{ tenant.slug }}, hard-pin
apiTokenSecretRef.name to cloudflare-api-token-{{ tenant.slug }} so it
matches the ESO-created Secret. ACME account key also slug-suffixed
for tenant isolation. Pre-0.7.3 the unsuffixed letsencrypt-prod
mismatched what instance.go:504 stamps into per-instance Certificates
(letsencrypt-prod-<slug>), so cert-manager logged 'Referenced
ClusterIssuer not found' and erp2 served Traefik default cert forever.

tenants-wildcard-cert.yaml: issuerRef.name → letsencrypt-prod-{{ $.Values.tenant.slug }}
to match the renamed ClusterIssuer.

values.yaml: secrets.cloudflareTokenSecret block deprecated (the chart
no longer reads it; kept for back-compat with external overrides).

Diagnosed in the qsoft2 migrate test 2026-05-09.

2026-05-09 21:30:36 +03:00

charts

fix(eso): include all subchart tarballs (longhorn, cert-manager, traefik) — repo-server helm dep build fails without them

2026-05-07 20:54:02 +03:00

templates

chart 0.7.3 — slug-suffix per-tenant ClusterIssuer (qsoft2 SSL fix)

2026-05-09 21:30:36 +03:00

Chart.lock

feat(eso): chart 0.6.0 - ESO subchart + ClusterSecretStore + gitea-archive-pull ExternalSecret

2026-05-07 20:46:22 +03:00

Chart.yaml

chart 0.7.3 — slug-suffix per-tenant ClusterIssuer (qsoft2 SSL fix)

2026-05-09 21:30:36 +03:00

README.md

Initial commit

2026-04-26 21:46:11 +00:00

values.yaml

chart 0.7.3 — slug-suffix per-tenant ClusterIssuer (qsoft2 SSL fix)

2026-05-09 21:30:36 +03:00

README.md

cluster-platform-v3

Per-cluster platform infrastructure chart. Deployed by ArgoCD into every connected customer K8s cluster. Brings up odoosky-system namespace + local container registry (where in-cluster BuildKit Jobs push addon images).