#4051 [Core feature] Add ability to use cert-manager generated cert instead of self-signed cert for webhook
Issue created by
rxraghu
Motivation: Why do you think this is important?
Self signed certificates are fine for development environments, but for production environments a more robust certificate provisioning mechanism should be used. cert-manager is a fairly popular certificate manager for k8s and can be used for this purpose as described here -
https://www.elastic.co/guide/en/cloud-on-k8s/1.2/k8s-webhook-cert-manager.html
Currently the propeller creates the self signed certificate, which may lead to intermittent failures like described in this
bug
Goal: What should the final outcome look like, ideally?
Flyte should allow webhook cert to be issued by cert-manager.
Describe alternatives you've considered
Could not consider any alternative as the self signed cert is being created in the propeller code.
Propose: Link/Inline OR Additional context
No response
Are you sure this issue hasn't been raised already?
☑︎ Yes
Have you read the Code of Conduct?
☑︎ Yes
flyteorg/flyte