Skip to content

Conversation

@samidbb
Copy link
Contributor

@samidbb samidbb commented Dec 11, 2025

This pull request adds support for installing and managing cert-manager alongside its Custom Resource Definitions (CRDs). It also adds instructions and script for updating cert-manager' CRDs

@samidbb samidbb marked this pull request as ready for review December 12, 2025 08:05
@samidbb samidbb requested a review from a team as a code owner December 12, 2025 08:05
@@ -0,0 +1,320 @@
# Source: cert-manager/templates/crd-cert-manager.io_certificaterequests.yaml
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a good reason why these are not store in the crds/ folder instead of the apps/ folder?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I must say that I find it odd to distribute things belonging together out into separate folders. It will make it harder to remove and have an overview of a single component, because the knowledge about it is spread out widely on the folder structure.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was inspired by this https://github.com/dfds/platform-apps/tree/main/apps/external-snapshotter-crd
so I followed the model. But ofcorse I would follow same structure.

@@ -0,0 +1,28 @@
#!/bin/bash
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  1. Can you please explain this file? I think it is the first time I have seen a bash script I have not understood at all.
  2. Why does it rely on a Docker container with yq, instead of yq installed?

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You are introducing processes that are manual and not automated. Now team members have to be aware of this new thing.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the script is just to help on creating separate files because when you download the crds from the release page it will download them as a single file.

install:
remediation:
retries: 3
values:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You need to set resources requests and limits here.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Which you ignored or removed from the templates and documentation I provided to you.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the example I already provided b1d8342

@@ -0,0 +1,8 @@
apiVersion: source.toolkit.fluxcd.io/v1
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I never understood the need for sources to not be with helmrelease?

In our setup we use the the <https://github.com/dfds/infrastructure-modules/tree/master/_sub/compute/k8s-traefik-flux> Terraform module to generate the kustomization.yaml files.
### Updating and commiting CRDs
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice attempt. But this will surely be forgotten. The solution should be automated and use the version used in the helmrelease.

Copy link
Contributor

@wcarlsen wcarlsen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think @avnes will take the rest but here is my inputs

@wcarlsen
Copy link
Contributor

I really like having the CRDs present in the repo, so that we can see what changes are being made to them.

Copy link
Contributor

@wcarlsen wcarlsen left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

addded link

install:
remediation:
retries: 3
values:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the example I already provided b1d8342

@wcarlsen
Copy link
Contributor

Should we close this one, since it is not ready for review @samidbb ?

@wcarlsen wcarlsen marked this pull request as draft January 14, 2026 07:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants