workaround: reload CA certificates anyway

minio · Aug 26, 2023 · ec9f9b3 · ec9f9b3
1 parent e4153f0
commit ec9f9b3
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pkg/controller/operator.go b/pkg/controller/operator.go
@@ -259,6 +259,8 @@ func (c *Controller) checkOpenshiftSignerCACertInOperatorNamespace(ctx context.C
 				},
 			}
 			_, err = c.kubeClientSet.CoreV1().Secrets(namespace).Create(ctx, csrSignerSecret, metav1.CreateOptions{})
+			// Reload CA certificates
+			c.createTransport()
 			return err
 		}
 		return err
@@ -271,6 +273,9 @@ func (c *Controller) checkOpenshiftSignerCACertInOperatorNamespace(ctx context.C
 			return err
 		}
 		klog.Infof("'%s/%s' secret changed, updating '%s/%s' secret", OpenshiftKubeControllerNamespace, OpenshiftCATLSSecretName, namespace, OperatorCSRSignerCASecretName)
+		c.fetchTransportCACertificates()
+		// Reload CA certificates
+		c.createTransport()
 	}
 	return nil
 }