Switch to GKE TLS certficate for perf-dash.k8s.io

[ameukam]

Signed-off-by: Arnaud Meukam ameukam@gmail.com

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ameukam

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• perf-dash.k8s.io/OWNERS [ameukam]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[ameukam]

Ref.: #1943

Certificate deployed:

kubectl get managedcertificate -n perfdash
NAME              AGE   STATUS
perfdash-k8s-io   62m   Active

openssl s_client -connect perf-dash.k8s.io:443
CONNECTED(00000003)
depth=2 C = US, O = Google Trust Services LLC, CN = GTS Root R1
verify return:1
depth=1 C = US, O = Google Trust Services LLC, CN = GTS CA 1D4
verify return:1
depth=0 CN = perf-dash.k8s.io
verify return:1

https://www.ssllabs.com/ssltest/analyze.html?d=perf-dash.k8s.io

/assign @thockin @spiffxp

[thockin]

Did you push and do cleanup yet? /lgtm /approved

…

On Tue, May 25, 2021 at 11:47 AM Kubernetes Prow Robot < ***@***.***> wrote: Assigned #2097 <#2097> to @thockin <https://github.com/thockin>. — You are receiving this because you were assigned. Reply to this email directly, view it on GitHub <#2097 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ABKWAVACSHSQGARJGQPMKYTTPPWDBANCNFSM45P52HTA> .

[ameukam]

Did you push and do cleanup yet?

@thockin Cleanup is done. what's remaining is spiffy certificate and the self-signed certificate for k8s-io-canary:

kubectl get certificate --all-namespaces
NAMESPACE       NAME                READY   SECRET             AGE
k8s-io-canary   k8s-io-selfsigned   True    k8s-io-tls         445d
sippy           sippy-k8s-io        False   sippy-k8s-io-tls   29d