Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!
openssl genrsa -des3 -out rootCA.key 4096
cat config/deploy/k8s/*.yml | envsubst | kubectl apply -f - | |
cat config/deploy/k8s/*.yml | envsubst | kubectl wait --for condition=available -f - --timeout 120s |