How do you specify PFX password when using Spn login with pfx certificate?

[kkizer]

I would like to use a PFX certificate when using a service principal to login when using the exec plugin. The path to the PFX file is specified with --client-certificate. How do you specify the password on the PFX file? The kubelogin get-token --help doesn't show an argument like --client-certificate-password. Is --password overloaded so that it is also used with PFX certs? If you can't have a password on the PFX, I'll need to create a PFX without a password.

[weinong]

looks like it currently hard codes to empty password

kubelogin/pkg/token/serviceprincipaltoken.go

Line 85 in 0fc3b33

cert, rsaPrivateKey, err := decodePkcs12(certData, "")

so, to unblock yourself, do a cert conversion to strip off the password :D