message: server: Updates the CA Cert file path if in-cluster
diff: @@ -56,7 +56,7 @@ func main() {
  fPublicDir := fs.String("public-dir", "./frontend/public/dist", "directory containing static web assets.")
  fTlSCertFile := fs.String("tls-cert-file", "", "TLS certificate. If the certificate is signed by a certificate authority, the certFile should be the concatenation of the server's certificate followed by the CA's certificate.")
  fTlSKeyFile := fs.String("tls-key-file", "", "The TLS certificate key.")
  - fCAFile := fs.String("ca-file", "", "PEM File containing trusted certificates of trusted CAs. If not present, the system's Root CAs will be used.")
  + fCAFile := fs.String("ca-file", "", "PEM File containing trusted certificates of trusted CAs. If not present, the system's Root CAs will be used. Not required for in-cluster clients to determine the expiration date for /tectonic/certs endpoint.")
  fTectonicVersion := fs.String("tectonic-version", "UNKNOWN", "The current tectonic system version, served at /version")
  fKubectlClientID := fs.String("kubectl-client-id", "", "The OAuth2 client_id of kubectl.")
  fKubectlClientSecret := fs.String("kubectl-client-secret", "", "The OAuth2 client_secret of kubectl.")
  @@ -84,12 +84,17 @@ func main() {
  }
  baseURL.Path = *fBasePath
  + caCertFilePath := *fCAFile
  + if *fK8sMode == "in-cluster" {
  + caCertFilePath = k8sInClusterCA
  + }
  +
  srv := &server.Server{
  PublicDir: *fPublicDir,
  TectonicVersion: *fTectonicVersion,
  BaseURL: baseURL,
  TectonicLicenseFile: *fLicenseFile,
  - TectonicCACertFile: *fCAFile,
  + TectonicCACertFile: caCertFilePath,
  }
  if (*fKubectlClientID == "") != (*fKubectlClientSecret == "") {
  