update certificates paths

Author: kvaps

deploy/helm/kubernetes/templates/apiserver-deployment.yaml

@@ -56,7 +56,7 @@ spec:
         - --allow-privileged=true
         - --authorization-mode=Node,RBAC
         - --bind-address=0.0.0.0
-        - --client-ca-file=/pki/apiserver/ca.crt
+        - --client-ca-file=/pki/apiserver-server/ca.crt
         - --enable-admission-plugins=NodeRestriction
         - --enable-bootstrap-token-auth=true
         - --etcd-cafile=/pki/apiserver-etcd-client/ca.crt
@@ -77,8 +77,8 @@ spec:
         - --secure-port={{ .Values.apiServer.port }}
         - --service-account-key-file=/pki/sa/sa.pub
         - --service-cluster-ip-range={{ .Values.apiServer.serviceClusterIPRange }}
-        - --tls-cert-file=/pki/apiserver/tls.crt
-        - --tls-private-key-file=/pki/apiserver/tls.key
+        - --tls-cert-file=/pki/apiserver-server/tls.crt
+        - --tls-private-key-file=/pki/apiserver-server/tls.key
         - --egress-selector-config-file=/etc/kubernetes/egress-selector-configuration.yaml
         {{- if .Values.konnectivityAgent.enabled }}{{"\n"}}
         - --service-account-issuer=api
@@ -120,8 +120,8 @@ spec:
           name: apiserver-config
         - mountPath: /pki/front-proxy-client
           name: pki-front-proxy-client
-        - mountPath: /pki/apiserver
-          name: pki-apiserver
+        - mountPath: /pki/apiserver-server
+          name: pki-apiserver-server
         - mountPath: /pki/apiserver-etcd-client
           name: pki-apiserver-etcd-client
         - mountPath: /pki/apiserver-kubelet-client
@@ -147,7 +147,7 @@ spec:
         name: pki-front-proxy-client
       - secret:
           secretName: "{{ $fullName }}-pki-apiserver-server"
-        name: pki-apiserver
+        name: pki-apiserver-server
       - secret:
           secretName: "{{ $fullName }}-pki-apiserver-etcd-client"
         name: pki-apiserver-etcd-client

deploy/helm/kubernetes/templates/controller-manager-deployment.yaml

@@ -66,6 +66,8 @@ spec:
         - --secure-port={{ .Values.controllerManager.port }}
         - --service-account-private-key-file=/pki/kubernetes-sa/sa.key
         - --use-service-account-credentials=true
+        - --tls-cert-file=/pki/controller-manager-server/tls.crt
+        - --tls-private-key-file=/pki/controller-manager-server/tls.key
         {{- range $key, $value := .Values.controllerManager.extraArgs }}
         - --{{ $key }}={{ $value }}
         {{- end }}

deploy/helm/kubernetes/templates/scheduler-deployment.yaml

@@ -57,6 +57,8 @@ spec:
         - --kubeconfig=/etc/kubernetes/scheduler.conf
         - --leader-elect=true
         - --secure-port={{ .Values.scheduler.port }}
+        - --tls-cert-file=/pki/scheduler-server/tls.crt
+        - --tls-private-key-file=/pki/scheduler-server/tls.key
         {{- range $key, $value := .Values.scheduler.extraArgs }}
         - --{{ $key }}={{ $value }}
         {{- end }}