add tls bundle to auth

Author: josemaia

modules/auth/main.go

@@ -38,6 +38,7 @@ func main() {
 		client.WithKubeconfig(args.KubeconfigPath()),
 		client.WithMasterUrl(args.ApiServerHost()),
 		client.WithInsecureTLSSkipVerify(args.ApiServerSkipTLSVerify()),
+		client.WithCaBundle(args.ApiServerCaBundle()),
 	)
 
 	klog.V(1).InfoS("Listening and serving insecurely on", "address", args.Address())

modules/auth/pkg/args/args.go

@@ -31,6 +31,7 @@ var (
 	argKubeconfig             = pflag.String("kubeconfig", "", "path to kubeconfig file")
 	argApiServerHost          = pflag.String("apiserver-host", "", "address of the Kubernetes API server to connect to in the format of protocol://address:port, leave it empty if the binary runs inside cluster for local discovery attempt")
 	argApiServerSkipTLSVerify = pflag.Bool("apiserver-skip-tls-verify", false, "enable if connection with remote Kubernetes API server should skip TLS verify")
+	argApiServerCaBundle				 = pflag.String("apiserver-ca-bundle", "", "file containing the x509 certificates used for HTTPS connection to the API Server")
 )
 
 func init() {
@@ -59,6 +60,10 @@ func ApiServerSkipTLSVerify() bool {
 	return *argApiServerSkipTLSVerify
 }
 
+func ApiServerCaBundle() string {
+	return *argApiServerCaBundle
+}
+
 func Address() string {
 	return fmt.Sprintf("%s:%d", *argAddress, *argPort)
 }