Merge pull request #1686 from shiftstack/webhook-cainject

🌱 Move webhook CA injection into webhook resource

Author: k8s-ci-robot

config/default/kustomization.yaml

@@ -19,19 +19,6 @@ patches:
 - path: manager_pull_policy.yaml
   # Enable webhook.
 - path: manager_webhook_patch.yaml
-  # Inject certificate in the webhook definition.
-- target:
-    group: admissionregistration.k8s.io
-    version: v1
-    kind: MutatingWebhookConfiguration
-    name: mutating-webhook-configuration
-  path: cainjection_patch.yaml
-- target:
-    group: admissionregistration.k8s.io
-    version: v1
-    kind: ValidatingWebhookConfiguration
-    name: validating-webhook-configuration
-  path: cainjection_patch.yaml
 
 vars:
   - name: CERTIFICATE_NAMESPACE # namespace of the certificate CR

config/default/cainjection_patch.yaml renamed to config/webhook/cainjection_patch.yaml

@@ -4,3 +4,11 @@ resources:
 
 configurations:
 - kustomizeconfig.yaml
+
+patches:
+# Inject certificate in the webhook definition.
+- target:
+    group: admissionregistration.k8s.io
+    version: v1
+    name: mutating-webhook-configuration|validating-webhook-configuration
+  path: cainjection_patch.yaml