tls.SelfSignedCert

Diagnostics:
  kubernetes:core/v1:Secret (kong-cluster-cert):
    error: Preview failed: resource kong/kong-kong-cluster was not successfully created by the Kubernetes API server : Secret in version "v1" cannot be handled as a Secret: illegal base64 data at input byte 0

data: {
        "tls.crt": kongClusterCert.certPem,
        "tls.key": kongClusterCert.privateKeyPem,

//// Issue certificate for kong cluster mtls
const kongClusterKey = new tls.PrivateKey(`${name}-cluster-mtls-pkey`, {
  algorithm: "RSA",
  rsaBits: 2048,
});

const kongClusterCert = new tls.SelfSignedCert(`${name}-cluster-mtls-cert`, {
  privateKeyPem: kongClusterKey.privateKeyPem,
  allowedUses: [
    "keyEncipherment",
    "digitalSignature",
    "serverAuth",
    "cert_signing",
    "crl_signing",
  ],
  keyAlgorithm: kongClusterKey.algorithm,
  subjects: [{ commonName: 'kong_clustering' }],
  dnsNames: ['kong_clustering'],
  validityPeriodHours: 4870,
  isCaCertificate: false,
},{
    parent: kongClusterKey,
});

// TODO: Consider Rotation Strategy
const secretKongClusterCert = new k8s.core.v1.Secret(`${name}-cluster-cert`, {
    apiVersion: "v1",
    kind: "Secret",
    type: "tls",
    metadata: {
        name: "kong-kong-cluster",
        namespace: "kong",
    },
    data: {
        "tls.crt": kongClusterCert.certPem,
        "tls.key": kongClusterCert.privateKeyPem,
    },
}, {
    dependsOn: [
        nsKong,
    ],
    parent: kongClusterCert,
    provider: kubeconfig,
});

stringData