Take care of supporting CertManager about helm-charts HOT 3 CLOSED

From cert-manager docs:

Be sure never to embed cert-manager as a sub-chart of other Helm charts; cert-manager manages non-namespaced resources in your cluster and care must be taken to ensure that it is installed exactly once.

I agree with that, plus cert-manager needs its own CRDs, that are cluster wide.

I believe we should not try to install cert-manager as part of our chart, and merely create a cert-manager issuer for self-signed certs, and values to pass the production cert.

We could create the webhook-secret-cert on our own, provided that the user passes the cert and key.

from helm-charts.

yes, I agree. I don't think it's a good idea to embed cert-manager and add these CRDs in our chart. We can point to cert-manager documention for its installation (similar to what others are doing https://docs.konghq.com/kubernetes-ingress-controller/1.3.x/guides/cert-manager/#set-up-cert-manager). Then we just create the Issuer and Certificate in our helm chart. Actually I am creating Issuer and Certificate in #31 in order to make webhooks work when installing kubewarden with helm (assuming cert-manager is already installed).

We could also create a self-signed cert and use it in the webhooks if user does not want to install cert-manager or just to have a quick way of installing and trying kubewarden.

from helm-charts.

I agree with @raulcabello's proposed solution. 👍

from helm-charts.