Add requestheader-client-ca.

2025-12-14 13:44:56 -05:00
parent 51feef1582
commit f18b7d0da9
8 changed files with 68 additions and 2 deletions
--- a/nix/kubernetes/keys/package/k8s-requestheader-client-ca/package.nix
+++ b/nix/kubernetes/keys/package/k8s-requestheader-client-ca/package.nix
@@ -0,0 +1,30 @@
+# unpackPhase
+# patchPhase
+# configurePhase
+# buildPhase
+# checkPhase
+# installPhase
+# fixupPhase
+# installCheckPhase
+# distPhase
+{
+  stdenv,
+  sqlite,
+  cfssl,
+  k8s,
+  all_hostnames,
+  ...
+}:
+stdenv.mkDerivation (finalAttrs: {
+  name = "k8s-service-account";
+  nativeBuildInputs = [ cfssl ];
+  buildInputs = [ ];
+
+  unpackPhase = "true";
+
+  installPhase = ''
+    mkdir -p "$out"
+    cd "$out"
+    cfssl gencert -initca ${./files/requestheader-client-ca-csr.json} | cfssljson -bare requestheader-client-ca
+  '';
+})