stack-orchestrator/stack_orchestrator/deploy/k8s
A. F. Dudley 6a2f2a5dde fix(k8s): drop stale ACME accounts during etcd cleanup
_clean_etcd_keeping_certs() preserved ALL caddy-system secrets across
cluster recreations, including ACME account secrets registered with
wrong/empty email. Caddy reuses these stale accounts instead of
registering fresh ones, causing recurring "unable to parse email
address" errors.

Filter the etcd restore loop to only keep certificate secrets (keys
matching *certificates*). ACME accounts, OCSP staples, and locks are
transient and get recreated automatically by Caddy on startup.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-10 01:43:48 -05:00
..
helm Fix pyright type errors across codebase 2026-01-22 01:10:36 -05:00
__init__.py Rename app -> stack_orchestrator (#625) 2023-11-07 00:06:55 -07:00
cluster_info.py fix(k8s): translate service names to localhost for sidecar containers 2026-02-03 18:10:32 -05:00
deploy_k8s.py feat(k8s): namespace-per-deployment for resource isolation and cleanup 2026-02-03 18:04:52 -05:00
helpers.py fix(k8s): drop stale ACME accounts during etcd cleanup 2026-02-10 01:43:48 -05:00
k8s_command.py Apply pre-commit linting fixes 2026-01-21 20:58:31 -05:00