-
Notifications
You must be signed in to change notification settings - Fork 66
Closed
Labels
Description
Recently we've done some work related to TLS support that has uncovered some difficulty in navigating the existing layout of manifests and utilization of kustomize to compose the V1 components and install them as a "single entity". Some of the struggles we've encountered are:
- Difficulty in sharing CAs for TLS certificates across namespaces
- Shared namespaces (switched to this pattern to resolve ^) causes some clashing related to labels and selectors, especially for metrics
- Separate component repositories and installation steps results in potentially clashing resources (i.e shared namespace, cert-manager resources, etc.)
To mitigate this, it was discussed offline between a few of the maintainers and determined that it would be worth the effort to re-think our manifest layouts and how we compose the OLMv1 components for installation. The goal of this epic is to capture the need for this work and serve as an area of discussion / planning.