Add TLS certs for local webhook server

.gitignore

@@ -1,6 +1,7 @@
 *.secret*
 .envrc
 hack/kind_kubeconfig.yaml
+.gitguardian.yaml
 
 # Binaries for programs and plugins
 *.exe

hack/config/certificates/host/config.json

@@ -0,0 +1,17 @@
+{
+  "signing": {
+    "default": {
+      "expiry": "43800h"
+    },
+    "profiles": {
+      "server": {
+        "usages": [
+          "signing",
+          "key encipherment",
+          "server auth"
+        ],
+        "expiry": "43800h"
+      }
+    }
+  }
+}

hack/config/certificates/host/generate.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+if ! command -v cfssl &>/dev/null ; then
+  echo "cfssl not found, install it from https://github.com/cloudflare/cfssl"
+  exit 1
+fi
+
+cd "$(dirname "$0")"
+
+rm -f *.pem
+
+cfssl gencert -config config.json -initca webhook-ca.json | cfssljson -bare webhook-ca
+
+cfssl gencert -config config.json -ca=webhook-ca.pem -ca-key=webhook-ca-key.pem -profile=server webhook-server.json | cfssljson -bare webhook-server
+
+rm *.csr

hack/config/certificates/host/kustomization.yaml

@@ -0,0 +1,15 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+namespace: sharding-system
+
+generatorOptions:
+  disableNameSuffixHash: true
+
+secretGenerator:
+- name: webhook-ca
+  options:
+    annotations:
+      cert-manager.io/allow-direct-injection: "true"
+  files:
+  - ca.crt=webhook-ca.pem

hack/config/certificates/host/webhook-ca-key.pem

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

hack/config/certificates/host/webhook-ca.json

@@ -0,0 +1,7 @@
+{
+  "CN": "sharding:sharder",
+  "key": {
+    "algo": "rsa",
+    "size": 4096
+  }
+}

hack/config/certificates/host/webhook-ca.pem

@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

hack/config/certificates/host/webhook-server-key.pem

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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=
+-----END RSA PRIVATE KEY-----

hack/config/certificates/host/webhook-server.json

@@ -0,0 +1,14 @@
+{
+  "CN": "sharding:sharder:webhook",
+  "key": {
+    "algo": "rsa",
+    "size": 4096
+  },
+  "hosts": [
+    "localhost",
+    "host.docker.internal",
+    "sharder.sharding-system",
+    "sharder.sharding-system.svc",
+    "sharder.sharding-system.svc.cluster.local"
+  ]
+}

hack/config/certificates/host/webhook-server.pem

@@ -0,0 +1,34 @@
+-----BEGIN CERTIFICATE-----
+MIIF1TCCA72gAwIBAgIURVQwgiERbtUeNjwxwSrp4jIAY+UwDQYJKoZIhvcNAQEN
+BQAwGzEZMBcGA1UEAxMQc2hhcmRpbmc6c2hhcmRlcjAeFw0yMzExMTAxMzA3MDBa
+Fw0yODExMDgxMzA3MDBaMCMxITAfBgNVBAMTGHNoYXJkaW5nOnNoYXJkZXI6d2Vi
+aG9vazCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJwwrDSeQKFeZa67
+DgLc7w5+7WbKqjNHuvKelBj4owXJj0tUI1UbGx8o1p3fy92wCUjru6cLt4JK9xy8
+j6660S6GwszJwFbdfl+KiZyHRmLjmVSX4C4JsnofHloHlcsQGzm15ENfS87Qw62s
+jHPCMkcgkM0qGejiVFm03x5CUkEb8aMFLTrzhdc4IOapiy+Y4kDV0n6ZlsKoV3Zn
+LhzbZWrtI4Zmth1wT5FRInULz0YmjGATW6B084wBcN0e9ph5rzh4QtIXZBeatgOA
+gvU75yHX+n0GWOc2a1jFr6xLyQal95Oo80G8A9xJxOTCYeeliDBEnaOvcXniWcGq
+a5g6/EH+eriah3DcCKhz6brCrtiXHoeQPqV6NDpwYnOv7E4QhLydZbrnU2u8yhoj
+mgZZFSejww/r+eo+/0lyMfIyHbYAUrXF/XlA51B4DVUpqzs57OaZ9BLGF54ulHR2
+LRrJ0qwKi7Peu77B8NlN4n+xMqMWxOI3ZxgicFJgwA7uuwihh9IKKcZ+9cpgIled
+aEjuiAu6hZ7q1sAslywryjeChBaUBESl+okn5c+1ypGutOKlyl1BgfKG6tffvDJV
+RzratTgrW2CA2ZrngWGYJae6esgFSIp6sJIppJrwka859geWLLKFUpliQr6Au2uv
+va2Cvut51xzUbWc3/YrLRj0iY0VFAgMBAAGjggEHMIIBAzAOBgNVHQ8BAf8EBAMC
+BaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
+Y2OhGXVByKhfKePAFNjN3oE5b6UwHwYDVR0jBBgwFoAUIPap7bhHigezp3QQ6oB1
+q9+rAzYwgY0GA1UdEQSBhTCBgoIJbG9jYWxob3N0ghRob3N0LmRvY2tlci5pbnRl
+cm5hbIIXc2hhcmRlci5zaGFyZGluZy1zeXN0ZW2CG3NoYXJkZXIuc2hhcmRpbmct
+c3lzdGVtLnN2Y4Ipc2hhcmRlci5zaGFyZGluZy1zeXN0ZW0uc3ZjLmNsdXN0ZXIu
+bG9jYWwwDQYJKoZIhvcNAQENBQADggIBACya1KVsYrn2ppv4/OIHduXyyHYdB9KU
+qnp98zAriLcPAgn1n9PuNYpfoyCP1amvKx24oUEW4NnPED3a54AeDOdInI2j7Xmb
+NVgjGBAta7ye4oZTuiB+MfBgpaSlH8ML6B6j7B/LQbQLpbSp/ZFNj73o56XAr/fi
+KQlbnn1fmGKlNywXDOnMpYhrYKMlB0KJ+bhTlD8gueBhYTRH4O5Kw1n6T2XUiZNf
+nK+rXMdCnXgq6HWWsRlOWWXFsxcDK58sEzw+uhQD/9Yu5jpcJV13K/MEK3q4L5pP
+4NDq7zItfF5GgKl9AZwXKTSJ8Ij3bjgb1HJteaM9Ul+Gu2NWd1BooQi7RBbtPOjN
+noi1JL2tJELG4bl7vUPvP+l/005cgCdqwPch4Eq+am3i0AT4rPutWnFlcZfc4lHm
+JMku6EvtS6aMQeipQmG91tHumtgNAcN5YlkHrDqL2FiOHYAo/XXjwrH3rL27s2CT
+OfpGcBS4wJsMUabdqPpU0mAXKcWFFwlv4e8hNiB8JF6ty8weN5AYymCAE/66mZgI
+SQ/0FYmSRFLg5g51bPHEEUig3UsI68pxJW3DQQSOYmHwpRPMHYV8lI8CrrAHtPp8
+eN8f8jBVkJfDLZ/LpeE6mH0OmtEbA+29kfYt1pdWdTAqrcmaF3d5j9wF28mExMXw
+d92Evgc96uZh
+-----END CERTIFICATE-----