UPSTREAM: <drop>: re-generate manifests for service-ca cert

Signed-off-by: Joe Lanford <[email protected]>

Author: joelanford

openshift/manifests/18-service-openshift-operator-controller-operator-controller-service.yml

@@ -2,6 +2,8 @@
 apiVersion: v1
 kind: Service
 metadata:
+  annotations:
+    service.beta.openshift.io/serving-cert-secret-name: operator-controller-cert
   labels:
     control-plane: operator-controller-controller-manager
   name: operator-controller-service

openshift/manifests/19-deployment-openshift-operator-controller-operator-controller-controller-manager.yml

@@ -44,6 +44,8 @@ spec:
             - --metrics-bind-address=:8443
             - --leader-elect
             - --ca-certs-dir=/run/secrets/kubernetes.io/serviceaccount
+            - --tls-cert=/var/certs/tls.crt
+            - --tls-key=/var/certs/tls.key
             - --v=${LOG_VERBOSITY}
             - --global-pull-secret=openshift-config/pull-secret
           command:
@@ -76,6 +78,8 @@ spec:
           volumeMounts:
             - mountPath: /var/cache
               name: cache
+            - mountPath: /var/certs
+              name: operator-controller-certs
             - mountPath: /etc/containers
               name: etc-containers
               readOnly: true
@@ -103,6 +107,10 @@ spec:
       volumes:
         - emptyDir: {}
           name: cache
+        - name: operator-controller-certs
+          secret:
+            optional: false
+            secretName: operator-controller-cert
         - hostPath:
             path: /etc/containers
             type: Directory