fix webhook cert injection (#197)

Signed-off-by: Artem Bortnikov <artem.bortnikov@telekom.com>
ironcore-dev · Dec 9, 2024 · d69127d · d69127d
1 parent 3fa1f4e
commit d69127d
Showing 1 changed file with 101 additions and 101 deletions.
diff --git a/config/default/kustomization.yaml b/config/default/kustomization.yaml
@@ -20,9 +20,9 @@ resources:
 - ../manager
 # [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix including the one in
 # crd/kustomization.yaml
-# - ../webhook
+- ../webhook
 # [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER'. 'WEBHOOK' components are required.
-# - ../certmanager
+- ../certmanager
 # [PROMETHEUS] To enable prometheus monitor, uncomment all sections with 'PROMETHEUS'.
 #- ../prometheus
 
@@ -34,109 +34,109 @@ patches:
 
 # [WEBHOOK] To enable webhook, uncomment all the sections with [WEBHOOK] prefix including the one in
 # crd/kustomization.yaml
-# - path: manager_webhook_patch.yaml
+- path: manager_webhook_patch.yaml
 
 # [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER'.
 # Uncomment 'CERTMANAGER' sections in crd/kustomization.yaml to enable the CA injection in the admission webhooks.
 # 'CERTMANAGER' needs to be enabled to use ca injection
-# - path: webhookcainjection_patch.yaml
+- path: webhookcainjection_patch.yaml
 
 # [CERTMANAGER] To enable cert-manager, uncomment all sections with 'CERTMANAGER' prefix.
 # Uncomment the following replacements to add the cert-manager CA injection annotations
-# replacements:
-#   - source: # Add cert-manager annotation to ValidatingWebhookConfiguration, MutatingWebhookConfiguration and CRDs
-#       kind: Certificate
-#       group: cert-manager.io
-#       version: v1
-#       name: serving-cert # this name should match the one in certificate.yaml
-#       fieldPath: .metadata.namespace # namespace of the certificate CR
-#     targets:
-#       - select:
-#           kind: ValidatingWebhookConfiguration
-#         fieldPaths:
-#           - .metadata.annotations.[cert-manager.io/inject-ca-from]
-#         options:
-#           delimiter: '/'
-#           index: 0
-#           create: true
-#       - select:
-#           kind: MutatingWebhookConfiguration
-#         fieldPaths:
-#           - .metadata.annotations.[cert-manager.io/inject-ca-from]
-#         options:
-#           delimiter: '/'
-#           index: 0
-#           create: true
-#       - select:
-#           kind: CustomResourceDefinition
-#         fieldPaths:
-#           - .metadata.annotations.[cert-manager.io/inject-ca-from]
-#         options:
-#           delimiter: '/'
-#           index: 0
-#           create: true
-#   - source:
-#       kind: Certificate
-#       group: cert-manager.io
-#       version: v1
-#       name: serving-cert # this name should match the one in certificate.yaml
-#       fieldPath: .metadata.name
-#     targets:
-#       - select:
-#           kind: ValidatingWebhookConfiguration
-#         fieldPaths:
-#           - .metadata.annotations.[cert-manager.io/inject-ca-from]
-#         options:
-#           delimiter: '/'
-#           index: 1
-#           create: true
-#       - select:
-#           kind: MutatingWebhookConfiguration
-#         fieldPaths:
-#           - .metadata.annotations.[cert-manager.io/inject-ca-from]
-#         options:
-#           delimiter: '/'
-#           index: 1
-#           create: true
-#       - select:
-#           kind: CustomResourceDefinition
-#         fieldPaths:
-#           - .metadata.annotations.[cert-manager.io/inject-ca-from]
-#         options:
-#           delimiter: '/'
-#           index: 1
-#           create: true
-#   - source: # Add cert-manager annotation to the webhook Service
-#       kind: Service
-#       version: v1
-#       name: webhook-service
-#       fieldPath: .metadata.name # namespace of the service
-#     targets:
-#       - select:
-#           kind: Certificate
-#           group: cert-manager.io
-#           version: v1
-#         fieldPaths:
-#           - .spec.dnsNames.0
-#           - .spec.dnsNames.1
-#         options:
-#           delimiter: '.'
-#           index: 0
-#           create: true
-#   - source:
-#       kind: Service
-#       version: v1
-#       name: webhook-service
-#       fieldPath: .metadata.namespace # namespace of the service
-#     targets:
-#       - select:
-#           kind: Certificate
-#           group: cert-manager.io
-#           version: v1
-#         fieldPaths:
-#           - .spec.dnsNames.0
-#           - .spec.dnsNames.1
-#         options:
-#           delimiter: '.'
-#           index: 1
-#           create: true
+replacements:
+  - source: # Add cert-manager annotation to ValidatingWebhookConfiguration, MutatingWebhookConfiguration and CRDs
+      kind: Certificate
+      group: cert-manager.io
+      version: v1
+      name: serving-cert # this name should match the one in certificate.yaml
+      fieldPath: .metadata.namespace # namespace of the certificate CR
+    targets:
+      - select:
+          kind: ValidatingWebhookConfiguration
+        fieldPaths:
+          - .metadata.annotations.[cert-manager.io/inject-ca-from]
+        options:
+          delimiter: '/'
+          index: 0
+          create: true
+      - select:
+          kind: MutatingWebhookConfiguration
+        fieldPaths:
+          - .metadata.annotations.[cert-manager.io/inject-ca-from]
+        options:
+          delimiter: '/'
+          index: 0
+          create: true
+      - select:
+          kind: CustomResourceDefinition
+        fieldPaths:
+          - .metadata.annotations.[cert-manager.io/inject-ca-from]
+        options:
+          delimiter: '/'
+          index: 0
+          create: true
+  - source:
+      kind: Certificate
+      group: cert-manager.io
+      version: v1
+      name: serving-cert # this name should match the one in certificate.yaml
+      fieldPath: .metadata.name
+    targets:
+      - select:
+          kind: ValidatingWebhookConfiguration
+        fieldPaths:
+          - .metadata.annotations.[cert-manager.io/inject-ca-from]
+        options:
+          delimiter: '/'
+          index: 1
+          create: true
+      - select:
+          kind: MutatingWebhookConfiguration
+        fieldPaths:
+          - .metadata.annotations.[cert-manager.io/inject-ca-from]
+        options:
+          delimiter: '/'
+          index: 1
+          create: true
+      - select:
+          kind: CustomResourceDefinition
+        fieldPaths:
+          - .metadata.annotations.[cert-manager.io/inject-ca-from]
+        options:
+          delimiter: '/'
+          index: 1
+          create: true
+  - source: # Add cert-manager annotation to the webhook Service
+      kind: Service
+      version: v1
+      name: webhook-service
+      fieldPath: .metadata.name # namespace of the service
+    targets:
+      - select:
+          kind: Certificate
+          group: cert-manager.io
+          version: v1
+        fieldPaths:
+          - .spec.dnsNames.0
+          - .spec.dnsNames.1
+        options:
+          delimiter: '.'
+          index: 0
+          create: true
+  - source:
+      kind: Service
+      version: v1
+      name: webhook-service
+      fieldPath: .metadata.namespace # namespace of the service
+    targets:
+      - select:
+          kind: Certificate
+          group: cert-manager.io
+          version: v1
+        fieldPaths:
+          - .spec.dnsNames.0
+          - .spec.dnsNames.1
+        options:
+          delimiter: '.'
+          index: 1
+          create: true