Update cert-manager to use default namespace for certificates and fix ca-issuer to... 98/15398/1
authorgarciadeblas <gerardo.garciadeblas@telefonica.com>
Wed, 10 Sep 2025 15:38:41 +0000 (17:38 +0200)
committergarciadeblas <gerardo.garciadeblas@telefonica.com>
Fri, 12 Sep 2025 10:04:43 +0000 (12:04 +0200)
Change-Id: I19697b5be650478e745ae8c81eb29332e46cc4f7
Signed-off-by: garciadeblas <gerardo.garciadeblas@telefonica.com>
installers/cluster/addons/install_cluster_addons.sh
installers/helm/osm/templates/certauth_setup/ca-issuer.yaml
installers/helm/osm/templates/lcm/lcm-client-certificate.yaml

index 1bb9162..c1dab5b 100755 (executable)
@@ -88,7 +88,6 @@ function install_helm_certmanager() {
     helm repo update
     helm upgrade --install cert-manager --create-namespace --namespace cert-manager jetstack/cert-manager \
         --version ${CERTMANAGER_VERSION} --set installCRDs=true --set prometheus.enabled=false \
-        --set clusterResourceNamespace=osm \
         --set extraArgs="{--enable-certificate-owner-ref=true}"
     [ -z "${DEBUG_INSTALL}" ] || DEBUG end of function
 }
index 59de79f..d2869e6 100644 (file)
 # limitations under the License.
 #######################################################################################
 apiVersion: cert-manager.io/v1
-kind: ClusterIssuer
+kind: Issuer
 metadata:
   name: ca-issuer
+  namespace: {{ .Release.Namespace }}
 spec:
   ca:
     secretName: osm-ca
index a16a805..9b84b97 100644 (file)
@@ -34,6 +34,6 @@ spec:
     - "client auth"
   issuerRef:
     name: ca-issuer
-    kind: ClusterIssuer
+    kind: Issuer
     group: cert-manager.io
 {{- end }}