ahmedgabers opened a new pull request, #1004: URL: https://github.com/apache/apisix-helm-chart/pull/1004
The ValidatingWebhookConfiguration renders with no annotations, so external CA managers cannot attach to it. With `webhook.certificate.provided`, operators supply a serving certificate (commonly a cert-manager Certificate) but must hand-copy the CA into `webhook.certificate.caBundle` and re-copy it whenever it rotates. An `webhook.annotations` knob lets cert-manager's cainjector own the caBundle instead (`cert-manager.io/inject-ca-from: <namespace>/<certificate>`) — the standard pattern for webhook trust management. Verified with `helm template`: the annotation renders onto the webhook configuration when set; unset output is byte-identical to today. Chart version bumped 1.3.0 -> 1.3.1; values doc comment and README row updated. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
