fix: resolve jsonpath error when waiting for caBundle in webhook configurations

- Fixed error:
  'deployment.apps/cert-manager-webhook condition met
   deployment.apps/cert-manager-cainjector condition met
   deployment.apps/cert-manager condition met
   error: jsonpath wait format must be --for=jsonpath='{.status.readyReplicas}'=3'
- The error appears because 'kubectl wait' isn’t fully compatible with JSONPath on non-status fields, especially for resources like 'mutatingwebhookconfigurations' and 'validatingwebhookconfigurations'. 'kubectl wait' expects status fields related to replicas, which aren’t present in these configurations.
- Replaced 'kubectl wait' with the 'kubectl_wait_for_caBundle' function, which uses a loop with 'kubectl get' to repeatedly check the 'caBundle' field until it is populated. This bypasses the limitations of 'kubectl wait' and avoids replica-based conditions for webhook configurations.

Author: camilamacedo86

scripts/install.tpl.sh

@@ -41,13 +41,36 @@ function kubectl_wait_rollout() {
     kubectl rollout status --namespace="${namespace}" "${runtime}" --timeout="${timeout}"
 }
 
+function kubectl_wait_for_caBundle() {
+    resource=$1
+    jsonpath_query=$2
+    timeout=$3
+
+    start_time=$(date +%s)
+    while true; do
+        caBundle_value=$(kubectl get "${resource}" -o jsonpath="${jsonpath_query}" 2>/dev/null || echo "")
+
+        if [[ -n "${caBundle_value}" ]]; then
+            echo "${resource} has populated ${jsonpath_query}."
+            break
+        fi
+
+        if [[ $(( $(date +%s) - start_time )) -ge ${timeout} ]]; then
+            echo "Timed out waiting for ${resource} to populate ${jsonpath_query}."
+            exit 1
+        fi
+
+        sleep 5
+    done
+}
+
 kubectl apply -f "https://github.com/cert-manager/cert-manager/releases/download/${cert_mgr_version}/cert-manager.yaml"
 # Wait for cert-manager to be fully ready
 kubectl_wait "cert-manager" "deployment/cert-manager-webhook" "60s"
 kubectl_wait "cert-manager" "deployment/cert-manager-cainjector" "60s"
 kubectl_wait "cert-manager" "deployment/cert-manager" "60s"
-kubectl wait mutatingwebhookconfigurations/cert-manager-webhook --for=jsonpath='{.webhooks[0].clientConfig.caBundle}' --timeout=60s
-kubectl wait validatingwebhookconfigurations/cert-manager-webhook --for=jsonpath='{.webhooks[0].clientConfig.caBundle}' --timeout=60s
+kubectl_wait_for_caBundle "mutatingwebhookconfigurations/cert-manager-webhook" '{.webhooks[0].clientConfig.caBundle}' 60
+kubectl_wait_for_caBundle "validatingwebhookconfigurations/cert-manager-webhook" '{.webhooks[0].clientConfig.caBundle}' 60
 
 kubectl apply -f "https://github.com/operator-framework/catalogd/releases/download/${catalogd_version}/catalogd.yaml"
 # Wait for the rollout, and then wait for the deployment to be Available