Updates to script b/c of invalid auth config

Signed-off-by: Matthias Wessendorf <[email protected]>

Author: matzew

build/kind.mk

@@ -9,9 +9,7 @@ CONTAINER_ENGINE ?= $(shell command -v docker 2>/dev/null || command -v podman 2
 kind-create-certs: ## Generate placeholder CA certificate for KIND bind mount
 	@if [ ! -f hack/cert-manager-ca/ca.crt ]; then \
 		echo "Creating placeholder CA certificate for bind mount..."; \
-		mkdir -p hack/cert-manager-ca; \
-		echo "placeholder" > hack/cert-manager-ca/ca.crt; \
-		echo "⚠️  Placeholder CA created - will be replaced with cert-manager CA after cluster creation"; \
+		./hack/generate-placeholder-ca.sh; \
 	else \
 		echo "✅ Placeholder CA already exists"; \
 	fi

hack/generate-placeholder-ca.sh

@@ -0,0 +1,22 @@
+#!/bin/bash
+set -e
+
+# Generate a placeholder self-signed CA certificate for KIND cluster startup
+# This will be replaced with the real cert-manager CA after the cluster is created
+
+CERT_DIR="hack/cert-manager-ca"
+CA_CERT="$CERT_DIR/ca.crt"
+CA_KEY="$CERT_DIR/ca.key"
+
+mkdir -p "$CERT_DIR"
+
+# Generate a self-signed CA certificate (valid placeholder)
+openssl req -x509 -newkey rsa:2048 -nodes \
+  -keyout "$CA_KEY" \
+  -out "$CA_CERT" \
+  -days 365 \
+  -subj "/CN=placeholder-ca" \
+  2>/dev/null
+
+echo "✅ Placeholder CA certificate created at $CA_CERT"
+echo "⚠️  This will be replaced with cert-manager CA after cluster creation"