cert-manager / sample-external-issuer

A sample external Issuer for cert-manager

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Question: enable Server-Side Apply (SSA)

lorenzoiuri opened this issue · comments

Hello,
we developed a custom issuer from the sample in this repository.

While testing our custom issuer, we encountered a bug which causes spurious reconcile loops in the RetryOnConflict function we use.
For some reason we still don't understand, the certificaterequest annotations changes are not always applied and the following Reconcile loop does not see them, causing a new API request to our backend.
This is a problem, since API requests must only be performed once per certificaterequest.

We posted the issue on the cert-manager issue tracker and we have been advised to enable Server-Side Apply.

Can it be enabled by changing a setting in the operator configuration (kubebuilder or client-go)?
In any case, could you please provide an example?

Thanks!

Closing as explained in cert-manager/cert-manager#5982.