# unpackPhase
# patchPhase
# configurePhase
# buildPhase
# checkPhase
# installPhase
# fixupPhase
# installCheckPhase
# distPhase
{
  stdenv,
  sqlite,
  cfssl,
  k8s,
  all_hostnames,
  ...
}:
stdenv.mkDerivation (finalAttrs: {
  name = "k8s-service-account";
  nativeBuildInputs = [ cfssl ];
  buildInputs = [ ];

  unpackPhase = "true";

  installPhase = ''
    mkdir -p "$out"
    cd "$out"
    cfssl gencert -initca ${./files/requestheader-client-ca-csr.json} | cfssljson -bare requestheader-client-ca
  '';
})