[wip] support system-internal-encryption after recent changes

[KauzClay]

In support of #703

Issues

• tests seem to be failing in the nightly bump PR: [Automated] Update net-contour nightly knative/serving#14490 (comment)
• on further inspection, I am seeing errors in the activator logs, looks like envoy->activator TLS handshake is failing:

  2023/10/11 20:09:33 http: TLS handshake error from 10.80.2.88:45732: tls: client offered only unsupported versions: [303 302 301]
  

Changes

• starting with updating the certificate delegation so that we use the new routing cert name
• Depends on upstream TLS version configuration in Contour: allow configuration of upstream TLS connection settings projectcontour/contour#5828

/kind

Fixes #

Release Note

Docs

[knative-prow]

@KauzClay: The label(s) kind/<kind> cannot be applied, because the repository doesn't have them.

In response to this:

Changes

/kind

Fixes #

Release Note

Docs

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[knative-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: KauzClay

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [KauzClay]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 93.90%. Comparing base (44cd41b) to head (55fe492).
Report is 52 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #980   +/-   ##
=======================================
  Coverage   93.90%   93.90%           
=======================================
  Files           7        7           
  Lines         804      804           
=======================================
  Hits          755      755           
  Misses         28       28           
  Partials       21       21           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[github-actions]

This Pull Request is stale because it has been open for 90 days with
no activity. It will automatically close after 30 more days of
inactivity. Reopen with /reopen. Mark as fresh by adding the
comment /remove-lifecycle stale.

[KauzClay]

Okay, been away trying to make some changes to Contour:

• allow configuration of upstream TLS connection settings projectcontour/contour#5828
• allow multiple SANS in upstream validation projectcontour/contour#5849

Hopefully, with these changes, I can resume this PR. Not sure when the next Contour release with these changes will be yet.

[github-actions]

This Pull Request is stale because it has been open for 90 days with
no activity. It will automatically close after 30 more days of
inactivity. Reopen with /reopen. Mark as fresh by adding the
comment /remove-lifecycle stale.