/usr/bin/cilium-certgen

cilium-certgen bootstraps TLS certificates and stores them as K8s secrets

Usage:
  cilium-certgen [flags]

Flags:
      --ca-cert-file string                              Path to the provided CA certificate file (required if the CA is not generated)
      --ca-common-name string                            CA common name (default "CA")
      --ca-configmap-name string                         Name of the K8s ConfigMap where the CA cert are stored in
      --ca-configmap-namespace string                    Namespace of the K8s ConfigMap where the CA cert are stored in
      --ca-enforce-validity-throughout-leaves-duration   Enforce that the CA certificates remain valid for the entire duration of the requested leaf certificates
      --ca-generate                                      Generate and store the CA certificate
      --ca-key-file string                               Path to the provided CA key file (required if the CA is not generated)
      --ca-reuse-secret                                  Reuse the CA secret if it exists, otherwise generate a new one
      --ca-secret-name string                            Name of the K8s Secret where the CA cert and key are stored in (default "ca")
      --ca-secret-namespace string                       Namespace of the K8s Secret where the CA cert and key are stored in (default "kube-system")
      --ca-validity-duration duration                    CA validity duration (default 26280h0m0s)
      --config string                                    YAML configuration of the certificates to generate, takes precedence over config-file
      --config-file string                               Path to the file containing the YAML configuration of the certificates to generate
  -D, --debug                                            Enable debug messages
  -h, --help                                             help for cilium-certgen
      --k8s-kubeconfig-path string                       Path to the K8s kubeconfig file. If absent, the in-cluster config is used.
      --k8s-request-timeout duration                     Timeout for K8s API requests (default 1m0s)
  -v, --version                                          version for cilium-certgen