You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We need to remove the cert-manager dependency.
Therefore, we need to bootstrap the root CA the first time the controller is installed and generate the controller's webhook TLS certificate.
Both the CA root and the controller webhook TLS certificate are stored in a secret.
This can be done directly in helm, by using the genCa and genSignedCert helper function.
Using helm is a good approach since it removes the complexity of bootstrapping certificates in the controller main function, which implies coordination with the leader election and generally slows down the initialization of the controller container.
We need to remove the
cert-manager
dependency.Therefore, we need to bootstrap the root CA the first time the controller is installed and generate the controller's webhook TLS certificate.
Both the CA root and the controller webhook TLS certificate are stored in a secret.
This can be done directly in helm, by using the genCa and genSignedCert helper function.
Using helm is a good approach since it removes the complexity of bootstrapping certificates in the controller main function, which implies coordination with the leader election and generally slows down the initialization of the controller container.
See https://github.com/aquasecurity/aqua-helm/blob/d212befe175998b7d8a83a7b0a33080993f171e5/kube-enforcer/templates/auto-generate-tls.yaml as an example
Subtasks:
The text was updated successfully, but these errors were encountered: