From 0611a16f757b878a1297fb29880bad6f7d03de8b Mon Sep 17 00:00:00 2001 From: James Callahan Date: Fri, 24 Mar 2023 10:33:47 +1100 Subject: [PATCH] caBundle doesn't need to be set And it causes the resource to show up in e.g. ArgoCD as Out-of-Sync --- config/webhook/ingressclassparams_patch.yaml | 4 +--- config/webhook/targetgroupbindings_patch.yaml | 4 +--- 2 files changed, 2 insertions(+), 6 deletions(-) diff --git a/config/webhook/ingressclassparams_patch.yaml b/config/webhook/ingressclassparams_patch.yaml index e58168a10..5ef882dad 100644 --- a/config/webhook/ingressclassparams_patch.yaml +++ b/config/webhook/ingressclassparams_patch.yaml @@ -9,9 +9,7 @@ spec: strategy: Webhook webhook: clientConfig: - # this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank, - # but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager) - caBundle: Cg== + # `caBundle` should be filled in by cert-manager (or potentially a patch if not using cert-manager) service: namespace: default name: webhook-service diff --git a/config/webhook/targetgroupbindings_patch.yaml b/config/webhook/targetgroupbindings_patch.yaml index 516a2c07a..ecd8ce67d 100644 --- a/config/webhook/targetgroupbindings_patch.yaml +++ b/config/webhook/targetgroupbindings_patch.yaml @@ -9,9 +9,7 @@ spec: strategy: Webhook webhook: clientConfig: - # this is "\n" used as a placeholder, otherwise it will be rejected by the apiserver for being blank, - # but we're going to set it later using the cert-manager (or potentially a patch if not using cert-manager) - caBundle: Cg== + # `caBundle` should be filled in by cert-manager (or potentially a patch if not using cert-manager) service: namespace: default name: webhook-service