cert-manager
Hard
Integration
Which annotation tells cainjector to fill a webhook configuration's caBundle from a cert-manager Certificate?
Select your answer:
Show answer and explanation
Answer: cert-manager.io/inject-ca-from: <namespace>/<certificate-name>
Explanation
cainjector watches ValidatingWebhookConfiguration, MutatingWebhookConfiguration, CustomResourceDefinition and APIService objects with this annotation. It copies the CA from the named Certificate's Secret into their caBundle fields and updates it when the certificate is renewed. cert-manager.io/inject-ca-from-secret does the same directly from a Secret.
More hard cert-manager questions
- cert-manager can't be given API access to the DNS zone for example.com. How can you still use DNS-01 for it?
- Which of the following is a valid way to revoke a certificate in cert-manager?
- Which of the following is a valid way to configure a Vault issuer?
- What is the purpose of the 'keystores' field in a Certificate resource?
- What is the purpose of the 'encodeUsagesInRequest' field in a Certificate resource?
- Which of the following is a valid way to debug a failing HTTP-01 challenge?