feat(kiali): Standardize Certificate Authority Configuration Method

[josunect]

• Use a CA file path in addition to the inline certificate.
• Document the standardized pattern for future RH toolsets.

This PR keeps the inline option for back-comp, but I can remove it if it is not required.

How to manually test it:

echo | openssl s_client -showcerts -connect kiali-istio-system.apps-crc.testing:443 2>/dev/null | openssl x509 > /tmp/kiali.crt

Configuration (Using a kiali https route):

url = "https://kiali-istio-system.apps-crc.testing/"
certificate_authority = "/tmp/kiali.crt"
insecure = false

Run the MCP server:

make build
npx @modelcontextprotocol/inspector@latest $(pwd)/kubernetes-mcp-server

[Cali0707]

This PR keeps the inline option for back-comp, but I can remove it if it is not required.

@josunect I think it should be safe for you to remove this - we haven't cut a release with kiali toolset yet, so I don't think we need to maintain backwards compatability yet (cc @manusa )

[manusa]

Can't this be replaced with the logic we have in place for other tests e.g.

kubernetes-mcp-server/pkg/kiali/kiali_test.go

Lines 31 to 35 in 8d76426

	s.Config = test.Must(config.ReadToml([]byte(`
	[toolset_configs.kiali]
	url = "https://kiali.example/"
	insecure = true
	`)))

[josunect]

Updated!

[aljesusg]

This PR keeps the inline option for back-comp, but I can remove it if it is not required.

@josunect I think it should be safe for you to remove this - we haven't cut a release with kiali toolset yet, so I don't think we need to maintain backwards compatability yet (cc @manusa )

Yes please, The idea is to replace the inline CA by path

[manusa]

@aljesusg @josunect I still se the support for inline PEM certificates.
I'm not sure if this is going to be removed in the scope of this PR or in a follow-up.

[aljesusg]

@aljesusg @josunect I still se the support for inline PEM certificates. I'm not sure if this is going to be removed in the scope of this PR or in a follow-up.

The idea is replace it, so yes we are going to remove it in this PR

[aljesusg]

Look good only this 2 minor things, I am going to test it locally

[manusa]

LGTM, thx!