Feature Overview (aka. Goal Summary)  

Ignition runs early in boot, before any time synchronization, and runs on newly-installed systems which may not have an accurate system clock. This can cause TLS certificate validation failures during fetch.

Goals (aka. expected user outcomes)

Add a mechanism to query time serves and use the result for TLS cert validation.

Requirements (aka. Acceptance Criteria):

TBD

Use Cases (Optional):

Bare metal install

Questions to Answer (Optional):

Does this include bare metal IPI?

Out of Scope

TBD

Background

https://github.com/coreos/ignition/issues/870