Use aligned flags and secrets for system-internal-tls

[ReToCode]

Changes

• Uses the aligned flags from Align flag naming according to the discussion knative/serving#14368
• Uses the new secrets & SANs from Use the aligned flags and certificate secrets in all components knative/serving#14369

/kind cleanup

Partially knative/serving#14369
Partially knative/serving#14392
Partially knative/serving#14368

Release Note

net-kourier now uses the new `system-internal-tls` flag to configure encryption of Knative system components.

Docs
Will be done separately when encryption is working end-to-end

[codecov]

Codecov Report

Merging #1116 (c328c40) into main (3fdb548) will increase coverage by 0.12%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##             main    #1116      +/-   ##
==========================================
+ Coverage   80.69%   80.81%   +0.12%     
==========================================
  Files          18       18              
  Lines        1383     1392       +9     
==========================================
+ Hits         1116     1125       +9     
  Misses        213      213              
  Partials       54       54              

Files	Coverage Δ
pkg/generator/ingress_translator.go	87.26% <100.00%> (+0.37%)	⬆️
pkg/reconciler/ingress/config/store.go	91.66% <100.00%> (ø)

[ReToCode]

/unhold

[nak3]

/lgtm
/approve

[knative-prow]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: nak3, ReToCode

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [nak3]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[nak3]

/hold

Ah, Code Style / style / Golang / Lint should be fixed.

[ReToCode]

We also need to create the new certificates with SANs in the script.
For now we do not use all of them, but I think it is better to have the correct secrets with SANs that we are going to use in Serving, so we can build on top of that when adding the cluster-local-domain-tls stuff.

[ReToCode]

/unhold
@nak3

[nak3]

/lgtm