Only generate a certificate if an existing in memory certificate isn'…

…t set

Signed-off-by: David Negstad <David.Negstad@microsoft.com>

pkg/server/options/serving.go

@@ -307,7 +307,7 @@ func (s *SecureServingOptions) MaybeDefaultWithSelfSignedCerts(publicAddress str
 		}
 	}
 
-	if !canReadCertAndKey {
+	if !canReadCertAndKey && s.ServerCert.GeneratedCert == nil {
 		// add either the bind address or localhost to the valid alternates
 		if s.BindAddress.IsUnspecified() {
 			alternateDNS = append(alternateDNS, "localhost")