David Schneider

@MaxRink We have the same problem. Could you solve the problem in the meantime?

> I'm not sure how this can be avoided. I think this should be possible by creating a new CA some time ahead before the existing CA expires but keeping...

> Or can a single caBundle include multiple acceptable certs? That's what I would expect. But haven't tested it.

https://github.com/kubernetes/api/blob/master/admissionregistration/v1/types.go#L526 The name caBundle implies to me that it can contain multiple CAs.

I tested this and it does work. I created two CA certificates (ca1 and ca2). Then I created one certificate (tls) and signed it with ca1 and another (tls-new) and...

Currently I don't have time to contribute a patch.

I'm also still having this issue with Go 1.18.3 and tinygo 0.23.0 ``` $ tinygo run main.go tinygo:ld.lld: error: undefined symbol: vendor/golang.org/x/sys/cpu.cpuid >>> referenced by cpu_x86.go:64 (/usr/lib/go/src/vendor/golang.org/x/sys/cpu/cpu_x86.go:64) >>> /home/david/.cache/tinygo/thinlto/llvmcache-B1DAA9FCDD26FCE588056B11F8335D13B495CB67:(runtime.run$1$gowrapper) >>>...

> dvob, are you on mac? @dkegel-fastly no, on linux

Now that I look at the changes again after some time, I probably still see a problem with my proposed solution. In the init function where the start flags get...

Sorry for my late response. @muhlemmer I did the changes you suggested.