Set x509keypairleaf=0 for X509KeyPair

Author: h3poteto

.github/workflows/build.yml

@@ -10,6 +10,9 @@ on:
 jobs:
   unit-test:
     runs-on: ubuntu-latest
+    env:
+      # https://pkg.go.dev/crypto/tls@go1.23.8#X509KeyPair
+      GODEBUG: x509keypairleaf=0
 
     steps:
       - uses: actions/checkout@master

pkg/controller/sidecarinjector/generator_test.go

@@ -158,6 +158,9 @@ func TestNewCertificates(t *testing.T) {
 	if err != nil {
 		t.Error(err)
 	}
+
+	// https://pkg.go.dev/crypto/tls@go1.23.8#X509KeyPair
+	// Before Go 1.23 Certificate.Leaf was left nil, and the parsed certificate was discarded. This behavior can be re-enabled by setting "x509keypairleaf=0" in the GODEBUG environment variable.
 	if certificate.Leaf != nil {
 		t.Errorf("Failed to parse certificate: %v", certificate)
 	}