@@ -58,6 +58,202 @@ patches:
5858images:
5959- name: controller
6060 newName: ${IMG}
61+ replacements:
62+ - source: # Add service DNS names to the certificates
63+ kind: Service
64+ version: v1
65+ name: webhook-service
66+ fieldPath: .metadata.name
67+ targets:
68+ - select:
69+ kind: Certificate
70+ group: cert-manager.io
71+ version: v1
72+ fieldPaths:
73+ - .spec.dnsNames.0
74+ - .spec.dnsNames.1
75+ options:
76+ delimiter: '.'
77+ index: 0
78+ create: true
79+ - source:
80+ kind: Service
81+ version: v1
82+ name: webhook-service
83+ fieldPath: .metadata.namespace
84+ targets:
85+ - select:
86+ kind: Certificate
87+ group: cert-manager.io
88+ version: v1
89+ fieldPaths:
90+ - .spec.dnsNames.0
91+ - .spec.dnsNames.1
92+ options:
93+ delimiter: '.'
94+ index: 1
95+ create: true
96+ - source: # Add the certificate namespace to CRDs annotation for CA Bundle injection
97+ kind: Certificate
98+ group: cert-manager.io
99+ version: v1
100+ name: serving-cert
101+ fieldPath: .metadata.namespace
102+ targets:
103+ - select:
104+ kind: CustomResourceDefinition
105+ name: cephconnections.csi.ceph.io
106+ fieldPaths:
107+ - .metadata.annotations.[cert-manager.io/inject-ca-from]
108+ options:
109+ delimiter: "/"
110+ index: 0
111+ create: true
112+ - source:
113+ kind: Certificate
114+ group: cert-manager.io
115+ version: v1
116+ name: serving-cert
117+ fieldPath: .metadata.namespace
118+ targets:
119+ - select:
120+ kind: CustomResourceDefinition
121+ name: clientprofiles.csi.ceph.io
122+ fieldPaths:
123+ - .metadata.annotations.[cert-manager.io/inject-ca-from]
124+ options:
125+ delimiter: "/"
126+ index: 0
127+ create: true
128+ - source:
129+ kind: Certificate
130+ group: cert-manager.io
131+ version: v1
132+ name: serving-cert
133+ fieldPath: .metadata.namespace
134+ targets:
135+ - select:
136+ kind: CustomResourceDefinition
137+ name: clientprofilemappings.csi.ceph.io
138+ fieldPaths:
139+ - .metadata.annotations.[cert-manager.io/inject-ca-from]
140+ options:
141+ delimiter: "/"
142+ index: 0
143+ create: true
144+ - source:
145+ kind: Certificate
146+ group: cert-manager.io
147+ version: v1
148+ name: serving-cert
149+ fieldPath: .metadata.namespace
150+ targets:
151+ - select:
152+ kind: CustomResourceDefinition
153+ name: drivers.csi.ceph.io
154+ fieldPaths:
155+ - .metadata.annotations.[cert-manager.io/inject-ca-from]
156+ options:
157+ delimiter: "/"
158+ index: 0
159+ create: true
160+ - source:
161+ kind: Certificate
162+ group: cert-manager.io
163+ version: v1
164+ name: serving-cert
165+ fieldPath: .metadata.namespace
166+ targets:
167+ - select:
168+ kind: CustomResourceDefinition
169+ name: operatorconfigs.csi.ceph.io
170+ fieldPaths:
171+ - .metadata.annotations.[cert-manager.io/inject-ca-from]
172+ options:
173+ delimiter: "/"
174+ index: 0
175+ create: true
176+
177+ - source: # Add the certificate name to CRDs annotation for CA Bundle injection
178+ kind: Certificate
179+ group: cert-manager.io
180+ version: v1
181+ name: serving-cert
182+ fieldPath: .metadata.name
183+ targets:
184+ - select:
185+ kind: CustomResourceDefinition
186+ name: cephconnections.csi.ceph.io
187+ fieldPaths:
188+ - .metadata.annotations.[cert-manager.io/inject-ca-from]
189+ options:
190+ delimiter: "/"
191+ index: 1
192+ create: true
193+ - source:
194+ kind: Certificate
195+ group: cert-manager.io
196+ version: v1
197+ name: serving-cert
198+ fieldPath: .metadata.name
199+ targets:
200+ - select:
201+ kind: CustomResourceDefinition
202+ name: clientprofiles.csi.ceph.io
203+ fieldPaths:
204+ - .metadata.annotations.[cert-manager.io/inject-ca-from]
205+ options:
206+ delimiter: "/"
207+ index: 1
208+ create: true
209+ - source:
210+ kind: Certificate
211+ group: cert-manager.io
212+ version: v1
213+ name: serving-cert
214+ fieldPath: .metadata.name
215+ targets:
216+ - select:
217+ kind: CustomResourceDefinition
218+ name: clientprofilemappings.csi.ceph.io
219+ fieldPaths:
220+ - .metadata.annotations.[cert-manager.io/inject-ca-from]
221+ options:
222+ delimiter: "/"
223+ index: 1
224+ create: true
225+ - source:
226+ kind: Certificate
227+ group: cert-manager.io
228+ version: v1
229+ name: serving-cert
230+ fieldPath: .metadata.name
231+ targets:
232+ - select:
233+ kind: CustomResourceDefinition
234+ name: drivers.csi.ceph.io
235+ fieldPaths:
236+ - .metadata.annotations.[cert-manager.io/inject-ca-from]
237+ options:
238+ delimiter: "/"
239+ index: 1
240+ create: true
241+ - source:
242+ kind: Certificate
243+ group: cert-manager.io
244+ version: v1
245+ name: serving-cert
246+ fieldPath: .metadata.name
247+ targets:
248+ - select:
249+ kind: CustomResourceDefinition
250+ name: operatorconfigs.csi.ceph.io
251+ fieldPaths:
252+ - .metadata.annotations.[cert-manager.io/inject-ca-from]
253+ options:
254+ delimiter: "/"
255+ index: 1
256+ create: true
61257endef
62258export BUILD_INSTALLER_OVERLAY
63259
0 commit comments