Indeed. Kubernetes setup is not for the faint of heart. But then again, it could be a LOT more confusing than this, I think. Here, you just download something, put it somewhere, and you're basically done. Once this is in place you can basically forget about it. Which was my aim. :)

I believe dealing with certificates that include the ability to end-to-end test them is never simple.