K3S with custom PKI / cluster-wide

[gfiasco]

Hi there,

Please forgive me if this feature is already present and I'm not skilled to know how to implement.

In my organization the security team channel all the traffic with a transparent proxy / man in the middle SSL cert.

this causes https traffic from pods to fail due to x509: certificate signed by unknown authority

with our OpenShift cluster we were able to fix it following this

https://docs.openshift.com/container-platform/4.6/networking/configuring-a-custom-pki.html

my understanding to replicate this I will have to deploy a transparent proxy to redirect all the pods traffic through