Topology operator configuration with TLS

[marcelloraffaele]

Hi Team,
I have configured my Topology Operator following the guide: tls-topology-operator, according to it, I needed to mount the CA secret editing the Deployment manifest:

kubectl -n rabbitmq-system patch deployment messaging-topology-operator --patch "spec:
  template:
    spec:
      containers:
      - name: manager
        volumeMounts:
        - mountPath: /etc/ssl/certs/rabbitmq-ca.crt
          name: rabbitmq-ca
          subPath: ca.crt
      volumes:
      - name: rabbitmq-ca
        secret:
          defaultMode: 420
          secretName: rabbitmq-ca"

I did it and it's working well.

Unfortunately I noticed that sometimes this "patch" disappear, maybe something replace it and the operator stop to work till I patch the deployment again.
Have you Idea if it is normal? Can I do something to make this configuration persistent?
Thank you,
RM

[ChunyiLyu]

@marcelloraffaele Do you have gitops or some other automation tools set up for your k8s cluster that could be overwriting the deployment? Changes from kubectl patch should be preserved no problem.