Files
Adin ScannellandgVisor bot 8b8a181868 Make the webhook deterministic.
We add a simple image that will generate certificates as a init container,
and refer to this directly use the Kubernetes yaml. Note that this also fixes
the issue of versioning within the yaml file, as this will now generate a
version of this file that refers to the precise local versions.

PiperOrigin-RevId: 421671040
2022-01-13 15:20:43 -08:00

9 lines
241 B
Plaintext

[req]
req_extensions = v3_req
distinguished_name = req_distinguished_name
[req_distinguished_name]
[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
extendedKeyUsage = clientAuth, serverAuth