Use cert-manager to secure APIService resource

Signed-off-by: James Munnelly <james@munnelly.eu>
2019-04-29 18:09:16 +01:00
parent 3935fd70e7
commit 2c01592255
4 changed files with 105 additions and 1 deletions
--- a/deploy/example-webhook/templates/apiservice.yaml
+++ b/deploy/example-webhook/templates/apiservice.yaml
@@ -7,11 +7,12 @@ metadata:
    chart: {{ include "example-webhook.chart" . }}
    release: {{ .Release.Name }}
    heritage: {{ .Release.Service }}
+  annotations:
+    certmanager.k8s.io/inject-ca-from: "{{ .Release.Namespace }}/{{ include "example-webhook.servingCertificate" . }}"
 spec:
  group: {{ .Values.groupName }}
  groupPriorityMinimum: 1000
  versionPriority: 15
-  insecureSkipTLSVerify: true
  service:
    name: {{ include "example-webhook.fullname" . }}
    namespace: {{ .Release.Namespace }}