cert-manager: 1.19.6 -> 1.20.3
Change-Id: Iabb070751250884fca8064f8b27d0a86a63959af
diff --git a/charts/cert-manager/templates/webhook-deployment.yaml b/charts/cert-manager/templates/webhook-deployment.yaml
index d2b10ae..66d6ead 100644
--- a/charts/cert-manager/templates/webhook-deployment.yaml
+++ b/charts/cert-manager/templates/webhook-deployment.yaml
@@ -81,7 +81,7 @@
{{- end }}
containers:
- name: {{ .Chart.Name }}-webhook
- image: "{{ template "image" (tuple .Values.webhook.image $.Chart.AppVersion) }}"
+ image: "{{ template "image" (tuple .Values.webhook.image .Values.imageRegistry .Values.imageNamespace (printf ":%s" .Chart.AppVersion)) }}"
imagePullPolicy: {{ .Values.webhook.image.pullPolicy }}
args:
{{- /* The if statement below is equivalent to {{- if $value }} but will also return true for 0. */ -}}
@@ -98,6 +98,15 @@
{{- if .Values.webhook.featureGates }}
- --feature-gates={{ .Values.webhook.featureGates }}
{{- end }}
+ {{- if .Values.webhook.enableClientVerification }}
+ - --enable-client-verification={{ .Values.webhook.enableClientVerification }}
+ {{- end }}
+ {{- if .Values.webhook.clientCAFile }}
+ - --client-ca-path={{ .Values.webhook.clientCAFile }}
+ {{- end }}
+ {{- if .Values.webhook.apiserverClientCertSubjects }}
+ - --client-subject-names={{ .Values.webhook.apiserverClientCertSubjects }}
+ {{- end }}
{{- $tlsConfig := default $config.tlsConfig "" }}
{{ if or (not $config.tlsConfig) (and (not $tlsConfig.dynamic) (not $tlsConfig.filesystem) ) -}}
- --dynamic-serving-ca-secret-namespace=$(POD_NAMESPACE)