Deleting ingress-related secrets causes 403 error from the Kubernetes API

[ppawlowski]

Current Behavior

When removing a NR project, related Kubernetes resources are deleted as well. Unfortunately, for an ingress-related secret, there is an error:

{
  "level": "ERROR",
  "time": "2025-09-24T05:00:00.146Z",
  "msg": "[k8s] Instance <REDACTED> - error deleting custom tls secret: Error: HTTP-Code: 403 Message: Unknown API Status Code!",
  "Body": {
    "kind": "Status",
    "apiVersion": "v1",
    "metadata": {},
    "status": "Failure",
    "message": "secrets \"<REDACTED>\" is forbidden: User \"<REDACTED>\" cannot delete resource \"secrets\" in API group \"\" in the namespace \"flowforge\"",
    "reason": "Forbidden",
    "details": {
      "name": "<REDACTED>",
      "kind": "secrets"
    },
    "code": 403
  }
}

Expected Behavior

Error should not be thrown on project removal.

Steps To Reproduce

1. Create new hosted instance
2. Delete it once it became available
3. Check core application logs

Environment

• FlowFuse version:
• Node.js version:
• npm version:
• Platform/OS:
• Browser:

Linked Customers

• Customer name and/or link to HubSpot contact