Make the certificate issuer name configurable

If we want to deploy it twice, we need to differentiate these
issuers.

Author: fwiesel

charts/openstack-hypervisor-operator/templates/deployment.yaml

@@ -39,6 +39,8 @@ spec:
             secretKeyRef:
               key: SERVICE_PASSWORD
               name: {{ include "openstack-hypervisor-operator.fullname" . }}-secret
+        - name: CERTIFICATE_ISSUER_NAME
+          value: {{ quote .Values.controllerManager.manager.env.certificateIssuerName }}
         - name: LABEL_SELECTOR
           value: {{ quote .Values.controllerManager.manager.env.labelSelector }}
         - name: KUBERNETES_CLUSTER_DOMAIN

charts/openstack-hypervisor-operator/values.yaml

@@ -4,13 +4,15 @@ controllerManager:
     - --metrics-bind-address=:8443
     - --leader-elect
     - --health-probe-bind-address=:8081
+    - --certificate-issuer-name=${CERTIFICATE_ISSUER_NAME}
     - --label-selector=${LABEL_SELECTOR}
     containerSecurityContext:
       allowPrivilegeEscalation: false
       capabilities:
         drop:
         - ALL
     env:
+      certificateIssuerName: ""
       labelSelector: ""
       osAuthUrl: ""
       osProjectDomainName: ""

config/manager/manager.yaml

@@ -61,6 +61,7 @@ spec:
       - args:
           - --leader-elect
           - --health-probe-bind-address=:8081
+          - --certificate-issuer-name=${CERTIFICATE_ISSUER_NAME}
           - --label-selector=${LABEL_SELECTOR}
         env:
           - name: OS_AUTH_URL
@@ -74,6 +75,7 @@ spec:
               secretKeyRef:
                 name: secret
                 key: SERVICE_PASSWORD
+          - name: CERTIFICATE_ISSUER_NAME
           - name: LABEL_SELECTOR
         image: keppel.eu-de-1.cloud.sap/ccloud/openstack-hypervisor-operator:latest
         name: manager