fdb-kubernetes-operator
fdb-kubernetes-operator copied to clipboard
Using cert-manager in the local test environment
The default configuration from Kubebuilder 2 includes an instance of cert-manager for generating self-signed certs. I removed this when I did the Kubebuilder 2 conversion to avoid changing too much at once. We should investigate this again and see if it's a better experience than the self-signed cert we're keeping in the repository now.
I took a look at this yesterday, and I don't think it's worth moving on yet. It looks like cert-manager is in alpha, and using it requires adding a lot of machinery to the local environment, which adds more complexity than it removes.
We should look at using Kubernetes' built-in certificate management instead. It isn't as full-featured, but it could work fine for our local testing, and could be a better example of the kinds of configuration choices people would use in real environments.