Niklas Ye
c97571c4c4
kubebuilder init --domain ryuvia.com --repo git.ryuvia.com/niklas/terdut-operator (--license none, no per-file header boilerplate -- terdut-server's source carries none either). Go 1.26.0/controller-runtime v0.25.0/controller-tools v0.22.0, whatever the current kubebuilder CLI (v4.16.0) scaffolds -- not pinned back to terdut-server's go 1.25.9, since this is a separate module with its own toolchain. Verified locally: build, vet, fmt all clean; `make lint` (golangci-lint, fetched into bin/) 0 issues; `make test` (controller-gen + setup-envtest, fetched into bin/, downloads real envtest binaries from storage.googleapis.com) passes. Dropped kubebuilder's default .github/workflows/* -- this org runs on Gitea, not GitHub; ci.yaml (next commit) is the only CI this repo gets.
31 lines
870 B
YAML
31 lines
870 B
YAML
# This patch adds the args, volumes, and ports to allow the manager to use the metrics-server certs.
|
|
|
|
# Add the volumeMount for the metrics-server certs
|
|
- op: add
|
|
path: /spec/template/spec/containers/0/volumeMounts/-
|
|
value:
|
|
mountPath: /tmp/k8s-metrics-server/metrics-certs
|
|
name: metrics-certs
|
|
readOnly: true
|
|
|
|
# Add the --metrics-cert-path argument for the metrics server
|
|
- op: add
|
|
path: /spec/template/spec/containers/0/args/-
|
|
value: --metrics-cert-path=/tmp/k8s-metrics-server/metrics-certs
|
|
|
|
# Add the metrics-server certs volume configuration
|
|
- op: add
|
|
path: /spec/template/spec/volumes/-
|
|
value:
|
|
name: metrics-certs
|
|
secret:
|
|
secretName: metrics-server-cert
|
|
optional: false
|
|
items:
|
|
- key: ca.crt
|
|
path: ca.crt
|
|
- key: tls.crt
|
|
path: tls.crt
|
|
- key: tls.key
|
|
path: tls.key
|