cabundle - how to work with it

caBundle is base64-encoded CA certificate that Kubernetes uses to trust the TLS certificate presented by your webhook server.

To see how we can generate this we can use the following command

openssl req -x509 -newkey rsa:4096 -keyout server.key -out server.crt -days 365 -nodes -subj "/CN=mutating-webhook.default.svc"

And to get the base64 encoded, just run the following command:-  

cat tls/server.crt | base64 -w 0