Changes for kubernets 1.9.

lib/pki.nix

@@ -101,6 +101,15 @@
     };
   };
 
+  trust = name: hosts: gencert rec {
+    inherit name;
+    csr = gencsr {
+      inherit name hosts;
+      cn = name;
+      o = name;
+    };
+  };
+
   kube-proxy = gencert rec {
     name = "kube-proxy";
     csr = gencsr {