From b837ded1fa6f4b3af2ffa913937b3a002206efdc Mon Sep 17 00:00:00 2001 From: garciadeblas Date: Wed, 10 Sep 2025 17:38:41 +0200 Subject: [PATCH] Update cert-manager to use default namespace for certificates and fix ca-issuer to be an Issuer Change-Id: I19697b5be650478e745ae8c81eb29332e46cc4f7 Signed-off-by: garciadeblas --- installers/cluster/addons/install_cluster_addons.sh | 1 - installers/helm/osm/templates/certauth_setup/ca-issuer.yaml | 3 ++- installers/helm/osm/templates/lcm/lcm-client-certificate.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/installers/cluster/addons/install_cluster_addons.sh b/installers/cluster/addons/install_cluster_addons.sh index 1bb9162f..c1dab5be 100755 --- a/installers/cluster/addons/install_cluster_addons.sh +++ b/installers/cluster/addons/install_cluster_addons.sh @@ -88,7 +88,6 @@ function install_helm_certmanager() { helm repo update helm upgrade --install cert-manager --create-namespace --namespace cert-manager jetstack/cert-manager \ --version ${CERTMANAGER_VERSION} --set installCRDs=true --set prometheus.enabled=false \ - --set clusterResourceNamespace=osm \ --set extraArgs="{--enable-certificate-owner-ref=true}" [ -z "${DEBUG_INSTALL}" ] || DEBUG end of function } diff --git a/installers/helm/osm/templates/certauth_setup/ca-issuer.yaml b/installers/helm/osm/templates/certauth_setup/ca-issuer.yaml index 59de79fd..d2869e66 100644 --- a/installers/helm/osm/templates/certauth_setup/ca-issuer.yaml +++ b/installers/helm/osm/templates/certauth_setup/ca-issuer.yaml @@ -16,9 +16,10 @@ # limitations under the License. ####################################################################################### apiVersion: cert-manager.io/v1 -kind: ClusterIssuer +kind: Issuer metadata: name: ca-issuer + namespace: {{ .Release.Namespace }} spec: ca: secretName: osm-ca diff --git a/installers/helm/osm/templates/lcm/lcm-client-certificate.yaml b/installers/helm/osm/templates/lcm/lcm-client-certificate.yaml index a16a8059..9b84b978 100644 --- a/installers/helm/osm/templates/lcm/lcm-client-certificate.yaml +++ b/installers/helm/osm/templates/lcm/lcm-client-certificate.yaml @@ -34,6 +34,6 @@ spec: - "client auth" issuerRef: name: ca-issuer - kind: ClusterIssuer + kind: Issuer group: cert-manager.io {{- end }} -- 2.25.1