From: garciadeblas Date: Wed, 10 Sep 2025 15:38:41 +0000 (+0200) Subject: Update cert-manager to use default namespace for certificates and fix ca-issuer to... X-Git-Tag: v18.0.1~9 X-Git-Url: https://osm.etsi.org/gitweb/?a=commitdiff_plain;h=c3a4e272e39bea523b7306e7542d387418fcf02d;p=osm%2Fdevops.git Update cert-manager to use default namespace for certificates and fix ca-issuer to be an Issuer Change-Id: I19697b5be650478e745ae8c81eb29332e46cc4f7 Signed-off-by: garciadeblas --- diff --git a/installers/cluster/addons/install_cluster_addons.sh b/installers/cluster/addons/install_cluster_addons.sh index 1bb9162f..c1dab5be 100755 --- a/installers/cluster/addons/install_cluster_addons.sh +++ b/installers/cluster/addons/install_cluster_addons.sh @@ -88,7 +88,6 @@ function install_helm_certmanager() { helm repo update helm upgrade --install cert-manager --create-namespace --namespace cert-manager jetstack/cert-manager \ --version ${CERTMANAGER_VERSION} --set installCRDs=true --set prometheus.enabled=false \ - --set clusterResourceNamespace=osm \ --set extraArgs="{--enable-certificate-owner-ref=true}" [ -z "${DEBUG_INSTALL}" ] || DEBUG end of function } diff --git a/installers/helm/osm/templates/certauth_setup/ca-issuer.yaml b/installers/helm/osm/templates/certauth_setup/ca-issuer.yaml index 59de79fd..d2869e66 100644 --- a/installers/helm/osm/templates/certauth_setup/ca-issuer.yaml +++ b/installers/helm/osm/templates/certauth_setup/ca-issuer.yaml @@ -16,9 +16,10 @@ # limitations under the License. ####################################################################################### apiVersion: cert-manager.io/v1 -kind: ClusterIssuer +kind: Issuer metadata: name: ca-issuer + namespace: {{ .Release.Namespace }} spec: ca: secretName: osm-ca diff --git a/installers/helm/osm/templates/lcm/lcm-client-certificate.yaml b/installers/helm/osm/templates/lcm/lcm-client-certificate.yaml index a16a8059..9b84b978 100644 --- a/installers/helm/osm/templates/lcm/lcm-client-certificate.yaml +++ b/installers/helm/osm/templates/lcm/lcm-client-certificate.yaml @@ -34,6 +34,6 @@ spec: - "client auth" issuerRef: name: ca-issuer - kind: ClusterIssuer + kind: Issuer group: cert-manager.io {{- end }}