k3s - Using Custom CA Certificates

[rmelilloii]

Hello, good morning and happy Monday!

I've been asked to add "custom CA Certificates" to replace the ones automatically generated by K3s. The demand is based on the fact that the automatically generated are self-signed and third party Pentest tends to classify it badly.

My question is: is it possible to use "hetzner-k3s" to do a few actions before the k3s service is installed? This way I could setup my local CA and generate the cert files to be used during k3s install.

Thanks!