fix(ci) support certmanager 1.4 (#697)

Signed-off-by: Ziming Zhang <zziming@vmware.com>

.github/workflows/tests.yml

@@ -144,7 +144,7 @@ jobs:
         certManager:
         - "1.1.1"
 #        - "1.2.0"
-        - "1.3.1"
+        - "1.4.0"
 
         # https://snapcraft.io/microk8s
         k8sVersion:
@@ -221,6 +221,8 @@ jobs:
           exit 1
         fi
 
+        sleep 10
+
     - name: install harbor
       run: |
         set -ex

README.md

@@ -85,9 +85,9 @@ Harbor operator supports two extra Kubernetes versions besides the current lates
 
 Harbor operator relies on cert manager to manage kinds of certificates used by Harbor cluster components. Table shown below lists the compatibilities of cert manager versions:
 
-|    Versions   |       1.0.4        |       1.2.0        |         1.3.1        |
-|---------------|--------------------|--------------------|----------------------|
-| Compatibility | :heavy_check_mark: | :heavy_check_mark: |  :heavy_check_mark:  |
+|    Versions   |       1.1.1        |       1.2.0        |         1.3.1        |         1.4.0        |
+|---------------|--------------------|--------------------|----------------------|----------------------|
+| Compatibility | :heavy_check_mark: | :heavy_check_mark: |  :heavy_check_mark:  |  :heavy_check_mark:  |
 
 ### Ingress controller types
 

controllers/goharbor/harbor/notarysigner.go

@@ -82,7 +82,7 @@ func (r *Reconciler) GetNotarySignerCertificateAuthority(ctx context.Context, ha
 			Duration: &metav1.Duration{
 				Duration: duration,
 			},
-			CommonName: r.NormalizeName(ctx, harbor.GetName(), controllers.NotarySigner.String()),
+			CommonName: r.NormalizeName(ctx, harbor.GetName(), controllers.NotarySigner.String(), "CA"),
 			IsCA:       true,
 			Usages: []certv1.KeyUsage{
 				certv1.UsageClientAuth,