fix: let longhorn-system read the 1Password store #24
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/secret-store-longhorn-namespace"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
The ClusterSecretStore is cluster-scoped but restricted by spec.conditions to the namespaces that consume its secrets, so the longhorn-backup ExternalSecret added in #23 was refused: "using cluster store onepassword is not allowed from namespace longhorn-system: denied by spec.condition". Without its Secret, Longhorn's backup target cannot authenticate to SeaweedFS.