{"id":49074061,"url":"https://github.com/tonedefdev/kubecsr","last_synced_at":"2026-04-20T09:04:57.157Z","repository":{"id":104111074,"uuid":"435017979","full_name":"tonedefdev/kubecsr","owner":"tonedefdev","description":null,"archived":false,"fork":false,"pushed_at":"2021-12-21T06:20:47.000Z","size":477,"stargazers_count":12,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2024-06-21T11:01:33.810Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/tonedefdev.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-12-04T22:01:12.000Z","updated_at":"2024-01-01T20:55:40.000Z","dependencies_parsed_at":null,"dependency_job_id":"29a4eb8d-a91f-4de5-ba86-d7611e9ac9c2","html_url":"https://github.com/tonedefdev/kubecsr","commit_stats":{"total_commits":37,"total_committers":2,"mean_commits":18.5,"dds":0.3783783783783784,"last_synced_commit":"7c4bba259bde794e493725f515ea0762471b9776"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/tonedefdev/kubecsr","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tonedefdev%2Fkubecsr","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tonedefdev%2Fkubecsr/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tonedefdev%2Fkubecsr/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tonedefdev%2Fkubecsr/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/tonedefdev","download_url":"https://codeload.github.com/tonedefdev/kubecsr/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/tonedefdev%2Fkubecsr/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32040364,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-20T00:18:06.643Z","status":"online","status_checked_at":"2026-04-20T02:00:06.527Z","response_time":94,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2026-04-20T09:04:53.705Z","updated_at":"2026-04-20T09:04:57.152Z","avatar_url":"https://github.com/tonedefdev.png","language":"Go","readme":"####\n\u003cimg src=\"https://github.com/tonedefdev/kubecsr/blob/dev/img/kubecsr_logo.png\" width=\"350\" height=\"300\"\u003e\n\nA lightweight REST service written in `Go` leveraging the `Gin` framework that automates the toil of creating `Kubernetes` x509 certificates for users. KubeCSR is meant to make the entire process super simple and performs the following functions in one swift action:\n- Creates an x509 Certificate Request (CSR) and a 2048-bit RSA Private Key\n- Generates and submits a Kubernetes CSR leveraging an administrative base64 encoded `Kubeconfig` passed into the request body\n- Automatically approves the Kubernetes CSR\n- Pulls the approved user certificate from the `Kubernetes` CSR\n- Extracts details like the cluster, server address, certificate CA, and other info from the administrative `Kubeconfig`\n- Returns a freshly generated base64 encoded user `Kubeconfig` that can be decoded and used to authenticate with the target `Kubernetes` cluster\n\n## Basic Example\n```json\n{\n    \"certificateRequest\": {\n        \"user\": \"timmy\"   \n    },\n    \"kubeconfig\": \"\u003cBASE64_ENCODED_ADMIN_KUBECONFIG\u003e\"\n}\n```\n\n## Full Example wtih Groups\n\u003e This example will create the `Kubernetes` user `linda` who will be part of the `devops` group. If using `RBAC` then `Kubernetes` roles and rolebindings can then be associated with the `devops` group so that `linda` would inherit the permissions from anywhere that `devops` is assigned.\n```json\n{\n    \"certificateRequest\": {\n        \"country\": [\n            \"United States\"\n        ],\n        \"locality\": [\n            \"Los Angeles\"\n        ],\n        \"organization\": [\n            \"devops\"\n        ],\n        \"organizationUnit\": [\n            \"IT\"\n        ],\n        \"postalCode\": [\n            \"55555\"\n        ],\n        \"streetAddress\": [\n            \"123 Main St.\"\n        ],\n        \"user\": \"linda\"   \n    },\n    \"kubeconfig\": \"\u003cBASE64_ENCODED_ADMIN_KUBECONFIG\u003e\"\n}\n```","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftonedefdev%2Fkubecsr","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftonedefdev%2Fkubecsr","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftonedefdev%2Fkubecsr/lists"}