kyma
kyma copied to clipboard
Generate and maintain certificates for the eventing webhook server
Description
With this PoC completed, we use cert-manager to create and maintain certificates, that would be used by the webhook server to authenticate against the webhook service. This is a lot of resources being created as part of the eventing component and hence would propose to generate self signed certs manually using go code and rotating them using a cronjob.
Note: Let's first discuss the outcome of this https://github.com/kyma-project/kyma/issues/15195.
Current status: We are going to use helm chart to create the certificate, which will have a long validity period! @muralov please update the ticket if there is more to add!
Note: Make sure that the chart does not rotate/generate certificates everytime the reconciler reconciles the cluster.