From 1b09be0d81c1f4d99d3fac81da45f40d6b195202 Mon Sep 17 00:00:00 2001
From: Jan Chaloupka <jchaloup@redhat.com>
Date: Fri, 29 May 2026 00:38:42 +0200
Subject: [PATCH] feat: have CVO inject the centralized TLS configuration into
 the operator's config

Also, have the operator restart whenever the config changes.
---
 manifests/05-config.yaml                     | 1 +
 manifests/07-operator-ibm-cloud-managed.yaml | 3 +++
 manifests/07-operator.yaml                   | 3 +++
 3 files changed, 7 insertions(+)

diff --git a/manifests/05-config.yaml b/manifests/05-config.yaml
index 7960c4ec34..7403479aae 100644
--- a/manifests/05-config.yaml
+++ b/manifests/05-config.yaml
@@ -9,6 +9,7 @@ metadata:
     include.release.openshift.io/self-managed-high-availability: "true"
     include.release.openshift.io/single-node-developer: "true"
     capability.openshift.io/name: Console
+    config.openshift.io/inject-tls: "true"
 data:
   controller-config.yaml: |
     apiVersion: operator.openshift.io/v1alpha1
diff --git a/manifests/07-operator-ibm-cloud-managed.yaml b/manifests/07-operator-ibm-cloud-managed.yaml
index eabfb01e16..f0f47c8bd2 100644
--- a/manifests/07-operator-ibm-cloud-managed.yaml
+++ b/manifests/07-operator-ibm-cloud-managed.yaml
@@ -25,6 +25,9 @@ spec:
       containers:
       - args:
         - --config=/var/run/configmaps/config/controller-config.yaml
+        - --terminate-on-files=/var/run/configmaps/config/controller-config.yaml
+        - --terminate-on-files=/var/run/secrets/serving-cert/tls.crt
+        - --terminate-on-files=/var/run/secrets/serving-cert/tls.key
         command:
         - console
         - operator
diff --git a/manifests/07-operator.yaml b/manifests/07-operator.yaml
index 82d03645c2..0ff98ffdc4 100644
--- a/manifests/07-operator.yaml
+++ b/manifests/07-operator.yaml
@@ -58,6 +58,9 @@ spec:
             - operator
           args:
             - "--config=/var/run/configmaps/config/controller-config.yaml"
+            - "--terminate-on-files=/var/run/configmaps/config/controller-config.yaml"
+            - "--terminate-on-files=/var/run/secrets/serving-cert/tls.crt"
+            - "--terminate-on-files=/var/run/secrets/serving-cert/tls.key"
           imagePullPolicy: IfNotPresent
           volumeMounts:
             - mountPath: /var/run/configmaps/config