When a sidecar is injected into cert-manager pod, certificate is not issued.

[jjangga0214]

When a sidecar is injected into cert-manager pod, certificate is not issued.

If I disable the injection, it works.

Is this a known issue?

Thanks.

[alpeb]

We disable by defaullt the injection of cert-manager, because the linkerd-proxy injector might race with cert-manager's ca-injector. See #7699 .

[jjangga0214]

Thanks! Is this written in the official docs? I haven't read about it. It might be worth documenting. Because so many people use cert-manager that someone may try injecting a sidecar. The source code seems to check namespace cert-manager but actually it can be on another namespace. How do you think?

[alpeb]

I couldn't find anything about it in the docs, so good point 👍 If you're up to it, we'd love to review a PR in the website repo to address this 😉