---
# Linkerd namespace and identity trust anchor ConfigMap.
# Test-only ephemeral ECDSA P-256 trust anchor for chart-test-swarm kind clusters.
# NOT real production credentials — safe to commit for reproducibility.
# Pre-created via raw_manifest before linkerd-control-plane helm install.
apiVersion: v1
kind: Namespace
metadata:
  name: linkerd
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: linkerd-identity-trust-roots
  namespace: linkerd
  labels:
    linkerd.io/control-plane-component: identity
data:
  ca-bundle.crt: '-----BEGIN CERTIFICATE-----

    MIIBnzCCAUWgAwIBAgIUNNNqJWTppf8sHA2oJc5PJnysHFcwCgYIKoZIzj0EAwIw

    JTEjMCEGA1UEAwwacm9vdC5saW5rZXJkLmNsdXN0ZXIubG9jYWwwHhcNMjYwNjAy

    MTczMTQ0WhcNMzYwNTMwMTczMTQ0WjAlMSMwIQYDVQQDDBpyb290LmxpbmtlcmQu

    Y2x1c3Rlci5sb2NhbDBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABKf4qbFb7uwH

    Fja5sArUyhhKt6emv/DSTkFwItqW0mAkQDPNWh2vqi9uafIjIXxInHDSyKAAtsQt

    Gwf8pPU2NCijUzBRMB0GA1UdDgQWBBRsjOdix+pumoqG4T9XIS5C2hXc2DAfBgNV

    HSMEGDAWgBRsjOdix+pumoqG4T9XIS5C2hXc2DAPBgNVHRMBAf8EBTADAQH/MAoG

    CCqGSM49BAMCA0gAMEUCIQDUdgB7YjaiucDhti3PdKn/EqM2UrdXZN+aOqfUta4q

    zAIgC2yUtwvrm831HbJQEpFVTNlIUHP5uUuVdfVgE6R4qHY=

    -----END CERTIFICATE-----

    '