bug: fix kube client apply for mutating manifest.

orange-cloudavenue · Sep 27, 2024 · 9fde5f2 · 9fde5f2
1 parent cccd0ab
commit 9fde5f2
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 2 deletions.
diff --git a/.changelog/8.txt b/.changelog/8.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+`webhook` - Fix kube client apply for mutating manifest.
+```
diff --git a/.gitignore b/.gitignore
@@ -1,4 +1,4 @@
 examples/
 bin/
 dist/
-config/manifests/mutatingWebhookConfiguration.yaml
+config/manifests/mutatingWebhookConfiguration.yaml
diff --git a/cmd/webhook/certificate.go b/cmd/webhook/certificate.go
@@ -90,6 +90,7 @@ func generateCert(orgs, dnsNames []string, commonName string) (*bytes.Buffer, *b
 	// print CA certificate if insideCluster is false
 	if !insideCluster {
 		writeNewCA(caPEM, manifestWebhookPath)
+		time.Sleep(2 * time.Second)
 		applyManifest(manifestWebhookPath)
 
 		debugLogger.Printf("CA certificate Encoded: %s", base64.StdEncoding.EncodeToString(caPEM.Bytes()))

diff --git a/config/manifests/mutatingWebhookConfiguration.yaml b/config/manifests/mutatingWebhookConfiguration.yaml
@@ -16,7 +16,7 @@ webhooks:
       #   path: /mutate
       #   port: 8443
       # CA certificate with BEGIN and END lines - base64 encoded
-      caBundle: "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"
+      caBundle: "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"
     rules:
       - operations: [ "CREATE", "UPDATE"]
         apiGroups: [""]