X-Git-Url: https://gerrit.o-ran-sc.org/r/gitweb?a=blobdiff_plain;f=service-exposure%2Frapps-webhook.yaml;h=c04c8a90000b53459470b668cab1433868e728a1;hb=refs%2Fchanges%2F03%2F12803%2F1;hp=d41ddf4b58b946af6c400756aea5d2fa64765a2c;hpb=d27589c6c314c95ec4e8b8c4aad7743dd2593bce;p=nonrtric.git

diff --git a/service-exposure/rapps-webhook.yaml b/service-exposure/rapps-webhook.yaml
index d41ddf4b..c04c8a90 100644
--- a/service-exposure/rapps-webhook.yaml
+++ b/service-exposure/rapps-webhook.yaml
@@ -1,6 +1,6 @@
 #
 # ============LICENSE_START=======================================================
-#  Copyright (C) 2022 Nordix Foundation.
+#  Copyright (C) 2022-2023 Nordix Foundation.
 # ================================================================================
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
@@ -44,6 +44,8 @@ metadata:
   namespace: default
   labels:
     app: jwt-proxy-admission-controller
+    app.kubernetes.io/instance: jwt-proxy-admission-controller
+    app.kubernetes.io/name: jwt-proxy-admission-controller
 spec:
   selector:
     matchLabels:
@@ -53,6 +55,8 @@ spec:
       labels:
         app: jwt-proxy-admission-controller
         version: v1
+        app.kubernetes.io/instance: jwt-proxy-admission-controller
+        app.kubernetes.io/name: jwt-proxy-admission-controller
     spec:
       serviceAccountName: webhook-app
       containers:
@@ -64,7 +68,7 @@ spec:
                 "-port", "8443",
                 "-tlsCertFile", "/certs/tls.crt",
                 "-tlsKeyFile", "/certs/tls.key",
-                "-hostPath", "/var/rapps/certs"
+                "-secret", "cm-keycloak-client-certs",
               ]
         ports:
         - containerPort: 8443
@@ -82,7 +86,7 @@ spec:
       volumes:
         - name: webhook-cert
           secret:
-            secretName: webhook-cert
+            secretName: cm-webhook-server-certs
   replicas: 1
 ---
 apiVersion: v1
@@ -90,6 +94,10 @@ kind: Service
 metadata:
   name: jwt-proxy-admission-controller
   namespace: default
+  labels:
+    app: jwt-proxy-admission-controller
+    app.kubernetes.io/instance: jwt-proxy-admission-controller
+    app.kubernetes.io/name: jwt-proxy-admission-controller
 spec:
   selector:
     app: jwt-proxy-admission-controller