# unpackPhase
# patchPhase
# configurePhase
# buildPhase
# checkPhase
# installPhase
# fixupPhase
# installCheckPhase
# distPhase
{
  stdenv,
  sqlite,
  cfssl,
  ...
}:
stdenv.mkDerivation (finalAttrs: {
  name = "k8s-ca";
  nativeBuildInputs = [ cfssl ];
  buildInputs = [ ];

  unpackPhase = "true";

  installPhase = ''
    mkdir -p "$out"
    cd "$out"
    cfssl gencert -initca ${./files/ca-csr.json} | cfssljson -bare ca
  '';
})