tree 214d48bcad4ede5909af88ce7deaadedd2d9fbe0
parent 7dbf18c1932b5c7945a2ba53d7580a6857cda5d3
author Serge Bazanski <serge@monogon.tech> 1706719607 +0100
committer Serge Bazanski <serge@monogon.tech> 1707390607 +0000

m/n/kubernetes: serve authproxy with node certificate

We are currently serving authproxy with the Kubernetes node certificate,
which is somewhat useless, considering that this certificate isn't even
issued by the same CA that the client certificates (which are Metropolis
certificates) presented.

This changes the authproxy to serve with Metropolis node certificates
instead.

Change-Id: I03ff19c919c6a9fa72c98997432cc06a59e9958e
Reviewed-on: https://review.monogon.dev/c/monogon/+/2740
Tested-by: Jenkins CI
Reviewed-by: Lorenz Brun <lorenz@monogon.tech>