fix: harden database URL handling, TLS verification and password rotation by thereisnotime · Pull Request #128 · thereisnotime/warpgate-operator

fix(instance): pass database URL to the init script via env

thereisnotime

committed

7f9cc17

fix(instance): keep database credentials out of the ConfigMap

thereisnotime

committed

e662340

fix(target)!: verify target TLS certificates unless told otherwise

thereisnotime

committed

8f3ef96

fix(credential): propagate password Secret rotation to Warpgate

thereisnotime

committed

569ba2f

fix(instance)!: verify the auto-created connection when the CA is known

thereisnotime

committed

e5fc04e

docs(openspec): archive security hardening change

thereisnotime

committed

55378b1

fix(instance): don't hash the raw database URL into the rollout annotation

thereisnotime

committed

6ece838

fix(instance): use a non-cryptographic checksum for the rollout key

thereisnotime

committed

734e2e4

fix(instance): handle rollout checksum write errors explicitly

thereisnotime

committed

d78643a

Navigation Menu

Repository navigation

fix: harden database URL handling, TLS verification and password rotation - #128

fix: harden database URL handling, TLS verification and password rotation#128
thereisnotime wants to merge 9 commits into
mainfrom
fix/security-hardening

Commits on Oct 6, 2026

fix(instance): pass database URL to the init script via env

fix(instance): keep database credentials out of the ConfigMap

fix(target)!: verify target TLS certificates unless told otherwise

fix(credential): propagate password Secret rotation to Warpgate

fix(instance)!: verify the auto-created connection when the CA is known

docs(openspec): archive security hardening change

fix(instance): don't hash the raw database URL into the rollout annotation

fix(instance): use a non-cryptographic checksum for the rollout key

fix(instance): handle rollout checksum write errors explicitly