/usr/bin/cilium-certgen

cilium-certgen bootstraps TLS certificates and stores them as K8s secrets

Usage:
  cilium-certgen [flags]

Flags:
      --ca-cert-file string             Path to the provided CA certificate file (required if the CA is not generated)
      --ca-common-name string           CA common name (default "CA")
      --ca-generate                     Generate and store the CA certificate
      --ca-key-file string              Path to the provided CA key file (required if the CA is not generated)
      --ca-reuse-secret                 Reuse the CA secret if it exists, otherwise generate a new one
      --ca-secret-name string           Name of the K8s Secret where the CA cert and key are stored in (default "ca")
      --ca-secret-namespace string      Namespace of the K8s Secret where the CA cert and key are stored in (default "kube-system")
      --ca-validity-duration duration   CA validity duration (default 26280h0m0s)
      --config string                   YAML configuration of the certificates to generate, takes precedence over config-file
      --config-file string              Path to the file containing the YAML configuration of the certificates to generate
  -D, --debug                           Enable debug messages
  -h, --help                            help for cilium-certgen
      --k8s-kubeconfig-path string      Path to the K8s kubeconfig file. If absent, the in-cluster config is used.
      --k8s-request-timeout duration    Timeout for K8s API requests (default 1m0s)
  -v, --version                         version for cilium-certgen