[REGRESSION/0.8.5] MutatingWebhookConfiguration certificate injected from incorrect namespace

[SIMULATAN]

Starting from 0.8.5, the MutatingWebhookConfiguration/open-feature-operator-mutating-webhook-configuration resource incorrectly references the default open-feature-operator-system namespace.

-    cert-manager.io/inject-ca-from: openfeature-operator/open-feature-operator-serving-cert
+    cert-manager.io/inject-ca-from: open-feature-operator-system/open-feature-operator-serving-cert

Strangely, this regression does not occur with the ValidatingWebhookConfiguration, which still references the correct namespace.

My Kustomization:

helmCharts:
  - releaseName: open-feature-operator
    name: open-feature-operator
    repo: https://open-feature.github.io/open-feature-operator
    version: 0.8.5
    namespace: openfeature-operator

Overriding the defaultNamespace value does not make any difference.

The full diff between 0.8.4 and 0.8.5: gist
(note that the open-feature-operator-webhook-service also used to have this problem, however, the inject-ca-from option was removed entirely in 0.8.5)

[beeme1mr]

Hey @SIMULATAN, thanks for reporting the issue. This issue was likely introduced during the upgrade of Kubebuilder. FYI @lukas-reining

[lukas-reining]

Hey @SIMULATAN, I will have a look tomorrow. Thanks for reporting!

[lukas-reining]

Hey @SIMULATAN, thanks again for bringing this up!
I pushed a change fixing this in #763.
The issue was introduced by the upgrade in kustomize changing how variable substitution works.