Skip to content

Conversation

h3poteto
Copy link

Issue #, if available:

This pull request is related to #139 and #134.

Description of changes:

  • deploy
    • Remove unnecessary roles
    • Add a kustomization file
  • Makefile
    • Stop to override mutating webhook configuration file
    • Stop checking and applying CSR

After v0.3.0, --in-ncluster=true option does not work fine. But Makefile was supposed to use CSR, so I could not install manifests using Makefile. I change manifests and Makefile to not use CSR.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@h3poteto h3poteto requested a review from a team as a code owner February 11, 2022 07:22
- kind: ServiceAccount
name: pod-identity-webhook
namespace: default
---
Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

When --in-cluster=false, we don't need this role. Because this webhook no longer creates a secret. The secret will be created by cert-manager.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant