Native Kubernetes Monitoring - Checkmk Raw Edition 2.1.0p18

Thank you so much !!
Very Sorry for bothering you:(

So all three certificates need to be generated on the K8 Cluster? we have sles sp4 as OS on K8.
We have a certificate portal in our organization where we submit the CSR.

  1. we create the conf file like below where we specify all the details like CN, O, OU etc
    [ req ]
    default_bits = 2048
    distinguished_name = dn
    req_extensions = req_ext
    [ dn ]
    CN = <service_name>. .cluster.local //What should be the service name here?
    [ req_ext ]
    subjectAltName = @alt_names
    [alt_names]
    DNS = <service_name>. .cluster.local //what should be the service name?
    Then we run the command
    openssl req -new -out sslcert.csr -keyout private.key -config config.cnf

Here we will get the key which would be the Cluster Collector key and after submitting the CSR, will get the Cluster Collector server certificate from my organization, now from where I will get checkmkCACert?
Do I have to create another conf file in K8 Cluster for checkmkCACert with FQDN as the name of the ingress?

BR
//Prachi