cert-manager-cainjector
FIPS 140-3SecurityCA injector component cert-manager image
CA injector component cert-manager image
cert-manager-cainjector is a Kubernetes addon component that automates the injection of CA (Certificate Authority) data into webhooks and APIServices from cert-manager certificates. As part of the cert-manager ecosystem, the CA injector ensures that Kubernetes admission webhooks, CustomResourceDefinition conversion webhooks, and extension API servers always have the correct CA bundle data for proper certificate validation.
The CA injector populates the caBundle field of ValidatingWebhookConfiguration, MutatingWebhookConfiguration,
CustomResourceDefinition, and APIService resources by copying CA data from cert-manager Certificates, Kubernetes
Secrets, or the Kubernetes API server's CA certificate. This automation eliminates the need for manual CA bundle
management and enables secure communication between the Kubernetes API server and webhook servers.
For more details, visit https://cert-manager.io/docs/concepts/ca-injector/.