cert-manager: Cache only kubemacpool secrets (k8snetworkplumbingwg#426)

The webhook secrets and services at kubemacpool are living under kubemacpool namespace, this change limit cert-manager reconciler to that so it will not cache secrets at all namespaces. Signed-off-by: Enrique Llorente <[email protected]>
RamLavi · Apr 15, 2024 · 0d3b36c · 0d3b36c
1 parent 7750f52
commit 0d3b36c
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/cmd/manager/main.go b/cmd/manager/main.go
@@ -77,7 +77,8 @@ func runCertManager() {
 	}
 
 	mgrOptions := ctrlmanager.Options{
-		MetricsBindAddress: "0", // disable metrics
+		MetricsBindAddress: "0",          // disable metrics
+		Namespace:          podNamespace, // cache only the secrets from kubemacpool namespace
 	}
 
 	mgr, err := ctrlmanager.New(config.GetConfigOrDie(), mgrOptions)