OSX Security for k8s

info.sh

# Notes on connecting 
# Trust the k8s root certificate
security -v add-trusted-cert -k "${HOME}/Library/Keychains/login.keychain-db" -r trustRoot "${KUBE_CERT}"
# Generate a user key and `security import` it
openssl genrsa -out "${CLIENTCERTKEY}" 4096
security import "${CLIENTCERTKEY}"

# Set for OSX
# Get the sha
# security find-cert -a -c ted -Z
# openssl x509 -noout -fingerprint  -in ~/.kube/ted.kube-prod.secrethouse.party.crt
security set-identity-preference -s https://api.kubernetes.server -Z "${CERTSHA}"

# Set for chrome
# AutoSelectCertificateForUrls ?