certctl

mirror of https://github.com/shankar0123/certctl.git synced 2026-06-07 19:21:29 +00:00

Files

T

shankar0123 13d4fa5589 fix(deploy/test): f5-mock-icontrol host-port collision (20443 → 20449)

CI run 25192994486 (deploy-vendor-e2e job) failed with:

  Error response from daemon: failed to set up container networking:
    driver failed programming external connectivity on endpoint
    certctl-test-f5-mock: Bind for 0.0.0.0:20443 failed: port is already
    allocated

apache-test (compose line 491) and f5-mock-icontrol (compose line 619)
both bound host port 20443. The pre-Phase-5 per-vendor matrix only ran
one sidecar at a time, so the collision was structurally hidden. The
ci-pipeline-cleanup Phase 5 collapse brings all 11 sidecars up
simultaneously — the bug surfaces.

This was a pre-existing latent bug in the deploy-hardening II Phase 1
(commit 47af4db) sidecar-matrix design that the matrix collapse
surfaced. Same pattern as the gofmt drift + libest build issues — the
new gates are doing their job, exposing real debt.

Fix: move f5-mock-icontrol from host port 20443 to 20449 (next free
in the 204xx range; 20448 is windows-iis-test, 20443-20447 occupied
by apache/haproxy/traefik/caddy/envoy).

Touched:
  deploy/docker-compose.test.yml — f5-mock-icontrol ports: 20449:443
  deploy/test/vendor_e2e_helpers.go — sidecarMap["f5-mock"].hostPort: 20449

Verified: every host port in deploy/docker-compose.test.yml is now
unique (per-port count == 1 across all 17 mappings).

2026-04-30 23:05:25 +00:00

helm

Update LICENSE metadata

2026-04-26 23:29:59 +00:00

test

fix(deploy/test): f5-mock-icontrol host-port collision (20443 → 20449)

2026-04-30 23:05:25 +00:00

.env.example

fix: externalize credentials and add agent key volume persistence

2026-03-20 01:20:27 -04:00

docker-compose.demo.yml

fix(deploy,db,handler): close fresh-clone postgres init failure + 4 ride-along audit findings (U-3 master)