No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

You need to create a PrivateKey with that package and then a SelfSignedCertificate

SelfSignedCertificates can be configured to be a CA

I've done this before for Kubernetes. Let me find you a link

<https://github.com/equinix-labs/kubernetes-cloud-init/blob/main/src/kubernetes/control-plane/certificates.ts|https://github.com/equinix-labs/kubernetes-cloud-init/blob/main/src/kubernetes/control-plane/certificates.ts>