sriov-network-operator
sriov-network-operator copied to clipboard
Request: Option to use self signed webhooks when using "make deploy-setup-k8s"
We are using make deploy-setup-k8s
Until now we used sriov-operator 4.4 and created a self signed CaBundles,
and then patched the 3 webhooks to have the CaBundles:
validatingwebhookconfiguration sriov-operator-webhook-config
mutatingwebhookconfiguration sriov-operator-webhook-config
mutatingwebhookconfiguration network-resources-injector-config
All went fine.
When we tried to use sriov-operator version 4.8, we saw that the CaBundle is removed after a minute or two. The reason is that it has now a owner which reconcile it https://github.com/openshift/sriov-network-operator/blob/49045c36efb9136813f049b9977fe2b93c0a46c0/controllers/sriovoperatorconfig_controller.go#L146
Even if we tried to inject the CaBundle to the configmap in the code above, the configmap as well was reconciled.
It will be great to have please a method that will allow us to use self signed certs on k8s installation, without the need to disable the webhook.
Thanks
/cc @zshi-redhat