Generates self-signed tls secrets for kubernetes. Run this with e.g. 'kubernetes-gencerts microk8s.local', then install the secrets with 'kubectl apply -f microk8s.local.yaml'

kubernetes-gencerts.sh

#!/bin/bash
HOSTNAME=${1:-localhost}
openssl req -newkey rsa:4096 -nodes -keyout $HOSTNAME.key -x509 -days 3650 -out $HOSTNAME.crt
echo "apiVersion: v1
kind: Secret
metadata:
  name: $HOSTNAME.tls
  namespace: default
type: kubernetes.io/tls
data:
  tls.crt: `cat $HOSTNAME.crt | base64 -w0`
  tls.key: `cat $HOSTNAME.key | base64 -w0`
" > $HOSTNAME.yaml