From 270efbe16cd0d36ab8e30ff9b08fc182ff29d3d4 Mon Sep 17 00:00:00 2001
From: Erik Harder <erik.harder@vshn.net>
Date: Thu, 28 Sep 2023 17:03:27 +0200
Subject: [PATCH] Exclude automatic AKS Key from being reconciled

---
 component/app.jsonnet                                     | 1 +
 tests/golden/defaults/cert-manager/apps/cert-manager.yaml | 1 +
 2 files changed, 2 insertions(+)

diff --git a/component/app.jsonnet b/component/app.jsonnet
index 9a63d2af..c12f7f61 100644
--- a/component/app.jsonnet
+++ b/component/app.jsonnet
@@ -20,6 +20,7 @@ local app = argocd.App('cert-manager', params.namespace) {
         name: 'cert-manager-webhook',
         jqPathExpressions: [
           '.webhooks[].namespaceSelector.matchExpressions[] | select(.key == "control-plane")',
+          '.webhooks[].namespaceSelector.matchExpressions[] | select(.key == "kubernetes.azure.com/managedby")',
         ],
       },
     ],
diff --git a/tests/golden/defaults/cert-manager/apps/cert-manager.yaml b/tests/golden/defaults/cert-manager/apps/cert-manager.yaml
index 41489024..3ea89eeb 100644
--- a/tests/golden/defaults/cert-manager/apps/cert-manager.yaml
+++ b/tests/golden/defaults/cert-manager/apps/cert-manager.yaml
@@ -8,5 +8,6 @@ spec:
     - group: admissionregistration.k8s.io
       jqPathExpressions:
         - .webhooks[].namespaceSelector.matchExpressions[] | select(.key == "control-plane")
+        - .webhooks[].namespaceSelector.matchExpressions[] | select(.key == "kubernetes.azure.com/managedby")
       kind: ValidatingWebhookConfiguration
       name: cert-manager-webhook