patch-operator

patch-operator is a Commodore component to manage patch-operator.

The component renders the upstream Helm chart and sets up a default service account which is granted cluster-admin by default. All patches created through the component library are created in the operator’s namespace and use the default service account managed by the component by default.

See the parameters reference for further details on how to configure the component.

If you’re migrating your setup from resource-locker operator to patch-operator, see the migration how-to for further details.

By default, the component uses cert-manager to issue self-signed certificates for the metrics and webhook endpoints of the operator. Optionally, users can configure their own external certificates for these endpoints. See the external certificates how-to for further details on how to setup external certificates.