AKS trusted certificates

[chaitanyaphalak]

What happened:
AKS uses self signed certificates for kubelet api

What you expected to happen:
AKS uses trusted certificates for kubelet api

How to reproduce it (as minimally and precisely as possible):
I have a http microservice which get metrics from kubelet api endpoints. Tried connecting to the rest api securely, which is not possible with self signed certs.

Anything else we need to know?:

Environment:

• Kubernetes version (use kubectl version): 1.13.5
• Size of cluster (how many worker nodes are in the cluster?) 3
• General description of workloads in the cluster (e.g. HTTP microservices, Java app, Ruby on Rails, machine learning, etc.) HTTP microservice that accesses kubelet api
• Others:

[chaitanyaphalak]

@jnoller Can you let us know if its possible, the AKS docs does not indicate the usage of trusted certificates.

[jnoller]

Providing validly signed (CA) root certificates/etc for the kubernetes API server/etc is not currently on the roadmap.

[chaitanyaphalak]

Thanks