From 2e04472ffdfe1106fd43c126c79689a35b9063bb Mon Sep 17 00:00:00 2001
From: David Landry <david@dmwl.net>
Date: Sun, 8 Sep 2024 20:30:23 -0400
Subject: [PATCH] fix(operators): inject the correct ca cert into webhook
 clients for Victoria Metrics

---
 .../overlays/system/inject-ca-from.patch.yaml         |  3 +++
 .../overlays/system/kustomization.yaml                | 11 +++++++++++
 2 files changed, 14 insertions(+)
 create mode 100644 apps/victoriametrics/overlays/system/inject-ca-from.patch.yaml

diff --git a/apps/victoriametrics/overlays/system/inject-ca-from.patch.yaml b/apps/victoriametrics/overlays/system/inject-ca-from.patch.yaml
new file mode 100644
index 0000000..45da980
--- /dev/null
+++ b/apps/victoriametrics/overlays/system/inject-ca-from.patch.yaml
@@ -0,0 +1,3 @@
+- op: add
+  path: /metadata/annotations/cert-manager.io~1inject-ca-from
+  value: "victoriametrics-system/vm-serving-cert"
diff --git a/apps/victoriametrics/overlays/system/kustomization.yaml b/apps/victoriametrics/overlays/system/kustomization.yaml
index 5830b19..7f94f4e 100644
--- a/apps/victoriametrics/overlays/system/kustomization.yaml
+++ b/apps/victoriametrics/overlays/system/kustomization.yaml
@@ -6,3 +6,14 @@ resources:
 namespace: victoriametrics-system
 patches:
   - path: certificate.patch.yaml
+  - path: inject-ca-from.patch.yaml
+    target:
+      group: apiextensions.k8s.io
+      version: v1
+      kind: CustomResourceDefinition
+      name: ".*victoriametrics.com"
+  - path: inject-ca-from.patch.yaml
+    target:
+      group: admissionregistration.k8s.io
+      version: v1
+      kind: ValidatingWebhookConfiguration