Currently there are some differences in the two documents that make it hard to achieve both.
Automatically rotating control plane TLS credentials
- In this document works fine
Automatically rotating webhook TLS credentials
- This document assumes you have NOT setup rotating control plane TLS credentials yet and it can make it confusing to understand.
- Also there is no mention of using cert manager to make the issuer or the alternative clusterIssuer like in the rotating control plane TLS credentials document.
See my comment here explaining how to use cert manager to issue webhook certs
I could be doing something dumb with my solution and would appriciate any advice!
Maybe also add details on how the expiration and rotation steps flow.