Generate certificates for the aggregation layer.

2026-01-09 18:19:34 -05:00
parent c0ace47d95
commit fd1ea9e890
13 changed files with 204 additions and 43 deletions
--- a/nix/kubernetes/keys/package/k8s-client-config/package.nix
+++ b/nix/kubernetes/keys/package/k8s-client-config/package.nix
@@ -26,7 +26,7 @@ stdenv.mkDerivation (finalAttrs: {

  buildPhase = ''
    kubectl config set-cluster kubernetes-the-hard-way \
-      --certificate-authority=${k8s.ca}/ca.crt \
+      --certificate-authority=${k8s.ca.client}/client-ca.crt \
      --embed-certs=true \
      --server=${lib.strings.escapeShellArg config_server} \
      --kubeconfig=${config_name}.kubeconfig