Output role cert key file

[WindzCUHK]

Description

issue: when external private key is rotated, the issued role certificate cannot be used

Changes

• new config
  • ENV: ROLE_CERT_KEY_FILE_OUTPUT
  • args: rolecert-key-file-output
• output role cert key file alongside with the corresponding role cert
  • rolecerts/domain_role.key.pem
• update go.mod

Type of change

• [x] Bug fix
• [x] New feature
• [ ] Refactoring (no functional changes, no api changes)
• [ ] Non-code changes (update documentation, pipeline, etc.)

Flags

• [ ] Breaks backward compatibility
• [ ] Requires a documentation update
• [ ] Has untestable code

---

Checklist

• [x] Followed the guidelines in the CONTRIBUTING document
• [x] Added prefix [skip ci]/[ci skip]/[no ci]/[skip actions]/[actions skip] in the PR title if necessary
• [x] Tested and linted the code
• [x] Commented the code
• [x] Made corresponding changes to the documentation
• [x] Passed all pipeline checking

Checklist for maintainer

• Use Squash and merge
• Double-confirm the merge message has prefix [skip ci]/[ci skip]/[no ci]/[skip actions]/[actions skip]
• Delete the branch after merge

[mlajkim]

Is v3.2.0 officially released after merging this PR? @WindzCUHK

[WindzCUHK]

@mlajkim

Is v3.2.0 officially released after merging this PR?

Yes, I think so.

[mlajkim]

memo

• [x] athenz-sia.env?

  #
  # Outputs private key specifically for role certificates (e.g. :true or false) (default: true)
  #
  ROLE_CERT_KEY_FILE_OUTPUT=true

[WindzCUHK]

athenz-sia.env?

multiple option missing... Can we handle this later in the following issue? https://github.com/AthenZ/k8s-athenz-sia/issues/40

[mlajkim]

The changes here happen to be destructive and changes will be handled in the issue here.