From a9e7649998f472a3373af246b94beef012028a3e Mon Sep 17 00:00:00 2001 From: Dominic Hopf Date: Fri, 13 Feb 2026 15:24:15 +0100 Subject: [PATCH] feat: introduce `privateKey.rotationPolicy` set to `Never` Default changed from "Never" to "Always" in cert-manager >= 1.18, ensure for now that the behavior does not change when cert-manager is updated. --- deploy/stackit/templates/pki.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/deploy/stackit/templates/pki.yaml b/deploy/stackit/templates/pki.yaml index c280430..6648501 100644 --- a/deploy/stackit/templates/pki.yaml +++ b/deploy/stackit/templates/pki.yaml @@ -34,6 +34,10 @@ spec: name: {{ include "stackit-cert-manager-webhook.selfSignedIssuer" . }} commonName: "ca.stackit-cert-manager-webhook.cert-manager" isCA: true + privateKey: + # Default changed from "Never" to "Always" in cert-manager >= 1.18, ensure + # for now that the behavior does not change when cert-manager is updated. + rotationPolicy: Never --- @@ -74,3 +78,7 @@ spec: - {{ include "stackit-cert-manager-webhook.fullname" . }} - {{ include "stackit-cert-manager-webhook.fullname" . }}.{{ .Release.Namespace }} - {{ include "stackit-cert-manager-webhook.fullname" . }}.{{ .Release.Namespace }}.svc + privateKey: + # Default changed from "Never" to "Always" in cert-manager >= 1.18, ensure + # for now that the behavior does not change when cert-manager is updated. + rotationPolicy: Never