From 263ec5e0c482b8820ea79632c93fd8fe6dbf6a5a Mon Sep 17 00:00:00 2001
From: Nitin Goyal <nigoyal@redhat.com>
Date: Wed, 15 Jan 2025 13:35:42 +0530
Subject: [PATCH] bundle: update generated changes

Signed-off-by: Nitin Goyal <nigoyal@redhat.com>
---
 ...f-operator-webhook-service_v1_service.yaml | 17 +++++++
 .../odf-operator.clusterserviceversion.yaml   | 49 ++++++++++++-------
 2 files changed, 48 insertions(+), 18 deletions(-)
 create mode 100644 bundle/odf-operator/manifests/odf-operator-webhook-service_v1_service.yaml

diff --git a/bundle/odf-operator/manifests/odf-operator-webhook-service_v1_service.yaml b/bundle/odf-operator/manifests/odf-operator-webhook-service_v1_service.yaml
new file mode 100644
index 00000000..923620cc
--- /dev/null
+++ b/bundle/odf-operator/manifests/odf-operator-webhook-service_v1_service.yaml
@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: Service
+metadata:
+  annotations:
+    service.beta.openshift.io/serving-cert-secret-name: webhook-server-cert
+  creationTimestamp: null
+  name: odf-operator-webhook-service
+spec:
+  ports:
+  - name: https
+    port: 443
+    protocol: TCP
+    targetPort: 9443
+  selector:
+    app.kubernetes.io/name: odf-operator
+status:
+  loadBalancer: {}
diff --git a/bundle/odf-operator/manifests/odf-operator.clusterserviceversion.yaml b/bundle/odf-operator/manifests/odf-operator.clusterserviceversion.yaml
index eb5e4d81..182c200f 100644
--- a/bundle/odf-operator/manifests/odf-operator.clusterserviceversion.yaml
+++ b/bundle/odf-operator/manifests/odf-operator.clusterserviceversion.yaml
@@ -35,7 +35,7 @@ metadata:
     categories: Storage
     console.openshift.io/plugins: '["odf-console"]'
     containerImage: quay.io/ocs-dev/odf-operator:latest
-    createdAt: "2024-11-21T13:20:34Z"
+    createdAt: "2025-01-15T08:04:37Z"
     description: OpenShift Data Foundation provides a common control plane for storage
       solutions on OpenShift Container Platform.
     features.operators.openshift.io/token-auth-aws: "true"
@@ -372,23 +372,6 @@ spec:
                 control-plane: controller-manager
             spec:
               containers:
-              - args:
-                - --secure-listen-address=0.0.0.0:8443
-                - --upstream=http://127.0.0.1:8080/
-                - --logtostderr=true
-                - --v=0
-                image: registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.11.0
-                name: kube-rbac-proxy
-                ports:
-                - containerPort: 8443
-                  name: https
-                resources: {}
-                securityContext:
-                  allowPrivilegeEscalation: false
-                  capabilities:
-                    drop:
-                    - ALL
-                  readOnlyRootFilesystem: true
               - args:
                 - --health-probe-bind-address=:8081
                 - --metrics-bind-address=127.0.0.1:8080
@@ -413,6 +396,10 @@ spec:
                   initialDelaySeconds: 15
                   periodSeconds: 20
                 name: manager
+                ports:
+                - containerPort: 9443
+                  name: webhook-server
+                  protocol: TCP
                 readinessProbe:
                   httpGet:
                     path: /readyz
@@ -433,6 +420,27 @@ spec:
                     drop:
                     - ALL
                   readOnlyRootFilesystem: true
+                volumeMounts:
+                - mountPath: /tmp/k8s-webhook-server/serving-certs
+                  name: cert
+                  readOnly: true
+              - args:
+                - --secure-listen-address=0.0.0.0:8443
+                - --upstream=http://127.0.0.1:8080/
+                - --logtostderr=true
+                - --v=0
+                image: registry.redhat.io/openshift4/ose-kube-rbac-proxy:v4.11.0
+                name: kube-rbac-proxy
+                ports:
+                - containerPort: 8443
+                  name: https
+                resources: {}
+                securityContext:
+                  allowPrivilegeEscalation: false
+                  capabilities:
+                    drop:
+                    - ALL
+                  readOnlyRootFilesystem: true
               securityContext:
                 runAsNonRoot: true
               serviceAccountName: odf-operator-controller-manager
@@ -442,6 +450,11 @@ spec:
                 key: node.ocs.openshift.io/storage
                 operator: Equal
                 value: "true"
+              volumes:
+              - name: cert
+                secret:
+                  defaultMode: 420
+                  secretName: webhook-server-cert
       - label:
           app: odf-console
         name: odf-console