Update certs for Pixie

Summary: We need to update certs to match the nats discovery domains.

Test Plan: N/A

Reviewers: michelle, vihang

Reviewed By: vihang

Signed-off-by: Zain Asgar <zasgar@pixielabs.ai>

Differential Revision: https://phab.corp.pixielabs.ai/D9879

GitOrigin-RevId: 730470a

skaffold/skaffold_cloud.yaml

@@ -119,3 +119,16 @@ profiles:
     value: [k8s/cloud/testing]
   activation:
   - env: PL_BUILD_TYPE=testing
+- name: prod
+  patches:
+  - op: add
+    path: /build/artifacts/context=./bazel/args
+    value:
+    - --compilation_mode=opt
+    - --stamp
+    - --action_env=GOOGLE_APPLICATION_CREDENTIALS
+  - op: replace
+    path: /deploy/kustomize/paths
+    value: [k8s/cloud/prod]
+  activation:
+  - env: PL_BUILD_TYPE=prod

src/utils/shared/certs/certs.go

@@ -135,7 +135,11 @@ func getCloudDNSNamesForNamespace(namespace string) []string {
 		fmt.Sprintf("*.%s.svc.cluster.local", namespace),
 		fmt.Sprintf("*.%s.pod.cluster.local", namespace),
 		"*.pl-nats",
+		"*.pl-nats.plc.svc",
 		"pl-nats",
+		"*.plc-nats",
+		"*.plc-nats.plc.svc",
+		"plc-nats",
 		"*.local",
 		"localhost",
 	}