From b2b2c9c26eac1cd7f0b38bfeda2fb098b2078513 Mon Sep 17 00:00:00 2001
From: thc1006 <84045975+thc1006@users.noreply.github.com>
Date: Sun, 16 Aug 2026 02:52:29 +0000
Subject: [PATCH] Stop pinning the o2ims operator's Kubernetes API address

The deployment sets KUBERNETES_BASE_URL to https://kubernetes.default.svc,
which is the one address Kubernetes does not promise a serving certificate
for. The control plane is expected to present a valid certificate for the
hostname or IP that $KUBERNETES_SERVICE_HOST represents, and the operator
derives that address itself, so pinning the name here only preserves a
dependency on a SAN that a cluster is free not to carry.

This needs nephio-project/nephio#1169 first. That is where the operator
learned to verify the API server's certificate and to fall back on the
advertised address; until an image carrying it is deployed, the operator's
own default for KUBERNETES_BASE_URL is http://127.0.0.1:8080, a kubectl
proxy that does not exist inside the pod. Merging this before then would
break every deployment made from this package.

Signed-off-by: thc1006 <84045975+thc1006@users.noreply.github.com>
---
 nephio/optional/o2ims/app/deployment.yaml | 2 --
 1 file changed, 2 deletions(-)

diff --git a/nephio/optional/o2ims/app/deployment.yaml b/nephio/optional/o2ims/app/deployment.yaml
index 0d45029..26b22a3 100644
--- a/nephio/optional/o2ims/app/deployment.yaml
+++ b/nephio/optional/o2ims/app/deployment.yaml
@@ -28,8 +28,6 @@ spec:
         env:
         - name: 'UPSTREAM_PKG_REPO'
           value: 'catalog-infra-capi'
-        - name: 'KUBERNETES_BASE_URL'
-          value: 'https://kubernetes.default.svc'
         resources:
           requests:
             memory: "256Mi"