Make cert algo configurable (for linkerd ecdsa)

2020-11-21 14:54:52 +01:00
parent 672130f635
commit 1dfd090f69
3 changed files with 14 additions and 6 deletions
--- a/modules/linkerd-certs.nix
+++ b/modules/linkerd-certs.nix
@@ -3,12 +3,14 @@ let
  identity = import ./initca.nix {
    inherit pkgs;
    name = "linkerd-identity-ca";
+    algo = "ecdsa";
    hosts = [ "identity.linkerd.cluster.local" ];
  };

  webhook = import ./initca.nix {
    inherit pkgs;
    name = "linkerd-webhook-ca";
+    algo = "ecdsa";
    hosts = [ "webhook.linkerd.cluster.local" ];
  };
 in {