Only generate a certificate if an existing in memory certificate isn't already set (#78)

* Only generate a certificate if an existing in memory certificate isn't set

Signed-off-by: David Negstad <[email protected]>

* Add a boolean to indicate whether GeneratedCert already has a value

Signed-off-by: David Negstad <[email protected]>

---------

Signed-off-by: David Negstad <[email protected]>

Author: danegsta

pkg/server/options/serving.go

@@ -107,6 +107,9 @@ type GeneratableKeyCert struct {
 	// GeneratedCert holds an in-memory generated certificate if CertFile/KeyFile aren't explicitly set, and CertDirectory/PairName are not set.
 	GeneratedCert dynamiccertificates.CertKeyContentProvider
 
+	// Indicates whether GeneratedCert already has a pre-generated value (in which case it should not be regenerated).
+	PregeneratedCert bool
+
 	// FixtureDirectory is a directory that contains test fixture used to avoid regeneration of certs during tests.
 	// The format is:
 	// <host>_<ip>-<ip>_<alternateDNS>-<alternateDNS>.crt
@@ -288,6 +291,9 @@ func (s *SecureServingOptions) MaybeDefaultWithSelfSignedCerts(publicAddress str
 	if s == nil || (s.BindPort == 0 && s.Listener == nil) {
 		return nil
 	}
+	if s.ServerCert.PregeneratedCert {
+		return nil
+	}
 	keyCert := &s.ServerCert.CertKey
 	if len(keyCert.CertFile) != 0 || len(keyCert.KeyFile) != 0 {
 		return nil