Skip to content

Combine both Automated Rotation of TLS Credentials documents for control-plane and webhooks #2070

@rwilder42

Description

@rwilder42

Currently there are some differences in the two documents that make it hard to achieve both.

Automatically rotating control plane TLS credentials

  • In this document works fine

Automatically rotating webhook TLS credentials

  • This document assumes you have NOT setup rotating control plane TLS credentials yet and it can make it confusing to understand.
  • Also there is no mention of using cert manager to make the issuer or the alternative clusterIssuer like in the rotating control plane TLS credentials document.

See my comment here explaining how to use cert manager to issue webhook certs

I could be doing something dumb with my solution and would appriciate any advice!

Maybe also add details on how the expiration and rotation steps flow.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions