commit 3a6d67e0c4774f8f72d558caf81601c00025936b
author Serge Bazanski <q3k@hackerspace.pl> Fri Mar 31 22:36:27 2023 +0000
committer q3k <q3k@hackerspace.pl> Fri Mar 31 22:53:59 2023 +0000
tree 1692071de573e4aed1c27c69ebd48c95078263a5
parent 777aab92a9d4b1326c93608aab81bb6aae341b4f

cluster/prodvider: rewrite against x509 lib for ed25519 support

This gets rid of cfssl for the kubernetes bits of prodvider, instead
using plain crypto/x509. This also allows to support our new fancy
ED25519 CA.

Change-Id: If677b3f4523014f56ea802b87499d1c0eb6d92e9
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1489
Reviewed-by: q3k <q3k@hackerspace.pl>

cluster/kube/lib/prodvider.libsonnet

diff --git a/cluster/kube/lib/prodvider.libsonnet b/cluster/kube/lib/prodvider.libsonnet
index 30b1674..f131681 100644
--- a/cluster/kube/lib/prodvider.libsonnet
+++ b/cluster/kube/lib/prodvider.libsonnet
@@ -9,7 +9,7 @@
 
         cfg:: {
             namespace: "prodvider",
-            image: "registry.k0.hswaw.net/q3k/prodvider:315532800-21bacc96d76e4f2074e769dfc65ab43702f52d10",
+            image: "registry.k0.hswaw.net/q3k/prodvider:1680301337",
 
             apiEndpoint: error "API endpoint must be set",
 
@@ -19,7 +19,7 @@
                     key: importstr "../../secrets/plain/ca-kube-prodvider.key",
                 },
                 kube: {
-                    cert: importstr "../../certs/ca-kube.crt",
+                    cert: importstr "../../certs/ca-kube-new.crt",
                 },
             }
         },