From 55b7d427fd0095f8efd77e6d71e9f6a832f41583 Mon Sep 17 00:00:00 2001 From: Arnob kumar saha Date: Fri, 21 Aug 2026 18:01:26 +0600 Subject: [PATCH] Set CA_CERT_PATH only when an object storage CA cert is provided The path was emitted unconditionally, pointing the platform at /data/credentials/ca.crt even when no CA_CERT_DATA was configured. Charts between v2026.5 and v2026.6 always rendered a ca.crt key in the objstore secret, and Helm cannot drop that key on upgrade, so those installations mount an empty file at that path and every bucket operation fails. Signed-off-by: Arnob kumar saha --- charts/ace/templates/platform/config.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/charts/ace/templates/platform/config.yaml b/charts/ace/templates/platform/config.yaml index 744de1c43..65d54a727 100644 --- a/charts/ace/templates/platform/config.yaml +++ b/charts/ace/templates/platform/config.yaml @@ -139,7 +139,9 @@ stringData: BUCKET_ENDPOINT = {{ .Values.global.infra.objstore.endpoint }} BUCKET_REGION = {{ .Values.global.infra.objstore.region }} BUCKET_PREFIX = {{ .Values.global.infra.objstore.prefix }} - CA_CERT_PATH = /data/credentials/ca.crt + {{- if and .Values.global.infra.objstore.s3 .Values.global.infra.objstore.s3.CA_CERT_DATA }} + CA_CERT_PATH = /data/credentials/ca.crt + {{- end }} [picture] DISABLE_GRAVATAR = false