Provide CertManager certificates for the metrics service.

If certificates are not provided, the metrics service offered by controller-runtime will default to using its own self-signed certificates. While functional, relying on those self-signed certs is not recommended for production environments due to security reasons.

Author: camilamacedo86

cmd/manager/main.go

@@ -186,6 +186,14 @@ func main() {
 		// These configurations ensure that only authorized users and service accounts
 		// can access the metrics endpoint.
 		FilterProvider: filters.WithAuthenticationAndAuthorization,
+
+		// Ensure that metrics is protected with certs managed by cert-manager
+		// If not informed, the metrics service provided by controller-runtime will use
+		// self-assigned certs which is not recommended as a good practice aiming
+		// security for productions envinroments.
+		CertDir:  "/var/certs/",
+		CertName: "olm-ca.crt",
+		KeyName:  "ca.crt",
 	}
 
 	mgr, err := ctrl.NewManager(ctrl.GetConfigOrDie(), ctrl.Options{