update: should enable/disable only the webhook

Signed-off-by: krishna sindhur <[email protected]>

CHANGELOG.md

@@ -91,6 +91,7 @@ Here is an overview of all new **experimental** features:
 - **AWS Secret Manager**: Pod identity overrides are honored ([#6195](https://github.com/kedacore/keda/issues/6195))
 - **Azure Event Hub Scaler**: Checkpointer errors are correctly handled ([#6084](https://github.com/kedacore/keda/issues/6084))
 - **Metrics API Scaler**: Prometheus metrics can have multiple labels ([#6077](https://github.com/kedacore/keda/issues/6077))
+- **Operator Webhook Flag**: Enable patching of webhook resources. ([#6184](https://github.com/kedacore/keda/issues/6184))
 
 ### Deprecations
 

pkg/certificates/certificate_manager.go

@@ -55,19 +55,20 @@ type CertManager struct {
 
 // AddCertificateRotation registers all needed services to generate the certificates and patches needed resources with the caBundle
 func (cm CertManager) AddCertificateRotation(ctx context.Context, mgr manager.Manager) error {
-	var rotatorHooks []rotator.WebhookInfo
+	rotatorHooks := []rotator.WebhookInfo{
+		{
+			Name: cm.APIServiceName,
+			Type: rotator.APIService,
+		},
+	}
 
 	if cm.EnableWebhookPatching {
-		rotatorHooks = []rotator.WebhookInfo{
-			{
+		rotatorHooks = append(rotatorHooks,
+			rotator.WebhookInfo{
 				Name: cm.ValidatingWebhookName,
 				Type: rotator.Validating,
 			},
-			{
-				Name: cm.APIServiceName,
-				Type: rotator.APIService,
-			},
-		}
+		)
 	} else {
 		cm.Logger.V(1).Info("Webhook patching is disabled, skipping webhook certificates")
 	}