cilium-certgen bootstraps TLS certificates and stores them as K8s secrets Usage: cilium-certgen [flags] Flags: --ca-cert-file string Path to the provided CA certificate file (required if the CA is not generated) --ca-common-name string CA common name (default "CA") --ca-generate Generate and store the CA certificate --ca-key-file string Path to the provided CA key file (required if the CA is not generated) --ca-reuse-secret Reuse the CA secret if it exists, otherwise generate a new one --ca-secret-name string Name of the K8s Secret where the CA cert and key are stored in (default "ca") --ca-secret-namespace string Namespace of the K8s Secret where the CA cert and key are stored in (default "kube-system") --ca-validity-duration duration CA validity duration (default 26280h0m0s) --config string YAML configuration of the certificates to generate, takes precedence over config-file --config-file string Path to the file containing the YAML configuration of the certificates to generate -D, --debug Enable debug messages -h, --help help for cilium-certgen --k8s-kubeconfig-path string Path to the K8s kubeconfig file. If absent, the in-cluster config is used. --k8s-request-timeout duration Timeout for K8s API requests (default 1m0s) -v, --version version for cilium-certgen