{"action":"created","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/16449","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/16449/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/16449/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/16449/events","html_url":"https://github.com/kubernetes/kubernetes/issues/16449","id":113878399,"number":16449,"title":"Specify own certificate for cluster","user":{"login":"jetole","id":830697,"avatar_url":"https://avatars.githubusercontent.com/u/830697?v=3","gravatar_id":"","url":"https://api.github.com/users/jetole","html_url":"https://github.com/jetole","followers_url":"https://api.github.com/users/jetole/followers","following_url":"https://api.github.com/users/jetole/following{/other_user}","gists_url":"https://api.github.com/users/jetole/gists{/gist_id}","starred_url":"https://api.github.com/users/jetole/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jetole/subscriptions","organizations_url":"https://api.github.com/users/jetole/orgs","repos_url":"https://api.github.com/users/jetole/repos","events_url":"https://api.github.com/users/jetole/events{/privacy}","received_events_url":"https://api.github.com/users/jetole/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/kubernetes/kubernetes/labels/team/control-plane","name":"team/control-plane","color":"d2b48c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-10-28T17:41:06Z","updated_at":"2015-10-29T04:17:14Z","closed_at":null,"body":"I would like to be able to provide my own certificate for the cluster. In this case I would like to be able to provide a wildcard cert assigned to the DevOps subdomain. Additionally, I know someone else who would like to use a normal root CA signed cert for their cluster and I can imagine this would apply equally to anyone using private CA's for their internal domains such as Active Directory signed certs, etc."},"comment":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/comments/152072154","html_url":"https://github.com/kubernetes/kubernetes/issues/16449#issuecomment-152072154","issue_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/16449","id":152072154,"user":{"login":"roberthbailey","id":7751204,"avatar_url":"https://avatars.githubusercontent.com/u/7751204?v=3","gravatar_id":"","url":"https://api.github.com/users/roberthbailey","html_url":"https://github.com/roberthbailey","followers_url":"https://api.github.com/users/roberthbailey/followers","following_url":"https://api.github.com/users/roberthbailey/following{/other_user}","gists_url":"https://api.github.com/users/roberthbailey/gists{/gist_id}","starred_url":"https://api.github.com/users/roberthbailey/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/roberthbailey/subscriptions","organizations_url":"https://api.github.com/users/roberthbailey/orgs","repos_url":"https://api.github.com/users/roberthbailey/repos","events_url":"https://api.github.com/users/roberthbailey/events{/privacy}","received_events_url":"https://api.github.com/users/roberthbailey/received_events","type":"User","site_admin":false},"created_at":"2015-10-29T04:17:14Z","updated_at":"2015-10-29T04:17:14Z","body":"For GCE, we currently unconditionally call [create-certs](https://github.com/kubernetes/kubernetes/blob/master/cluster/gce/util.sh#L534) to generate custom certificates for the cluster. It wouldn't be difficult to only call this function if certificates don't already exist (that function just sets a bunch of environment variables) and use provided certificates instead. "}}