Merge pull request #303 from kagenti/fix/proxy-sidecar-gaps

fix: Proxy-sidecar reinvocation check and routes volume mount

Author: huang195

kagenti-operator/internal/webhook/injector/container_builder.go

@@ -463,6 +463,11 @@ func (b *ContainerBuilder) BuildProxySidecarContainerWithPorts(spireEnabled bool
 			MountPath: "/etc/authbridge",
 			ReadOnly:  true,
 		},
+		{
+			Name:      AuthproxyRoutesConfigMapName,
+			MountPath: "/etc/authproxy",
+			ReadOnly:  true,
+		},
 	}
 	if spireEnabled {
 		volumeMounts = append(volumeMounts, corev1.VolumeMount{

kagenti-operator/internal/webhook/v1alpha1/authbridge_webhook.go

@@ -174,6 +174,7 @@ func (w *AuthBridgeWebhook) isAlreadyInjected(podSpec *corev1.PodSpec) bool {
 	// containerExists/volumeExists checks for idempotency).
 	for i := range podSpec.Containers {
 		if podSpec.Containers[i].Name == injector.EnvoyProxyContainerName ||
+			podSpec.Containers[i].Name == injector.AuthBridgeProxyContainerName ||
 			podSpec.Containers[i].Name == injector.SpiffeHelperContainerName ||
 			podSpec.Containers[i].Name == injector.ClientRegistrationContainerName ||
 			podSpec.Containers[i].Name == injector.AuthBridgeContainerName {