https://github.com/cert-manager/csi-driver

A Kubernetes CSI plugin to automatically mount signed certificates to Pods using ephemeral volumes
https://github.com/cert-manager/csi-driver

cert-manager certificate kubernetes

Last synced: 4 days ago
JSON representation

A Kubernetes CSI plugin to automatically mount signed certificates to Pods using ephemeral volumes

• Host: GitHub
• URL: https://github.com/cert-manager/csi-driver
• Owner: cert-manager
• License: apache-2.0
• Created: 2019-08-16T20:49:46.000Z (over 5 years ago)
• Default Branch: main
• Last Pushed: 2024-04-14T00:41:25.000Z (9 months ago)
• Last Synced: 2024-04-14T02:23:09.239Z (9 months ago)
• Topics: cert-manager, certificate, kubernetes
• Language: Go
• Homepage: https://cert-manager.io/docs/usage/csi-driver/
• Size: 1.07 MB
• Stars: 181
• Watchers: 13
• Forks: 46
• Open Issues: 21
• Metadata Files:
  • Readme: README.md
  • Contributing: CONTRIBUTING.md
  • License: LICENSE
  • Security: SECURITY.md

Awesome Lists containing this project

• awesome - cert-manager/csi-driver - A Kubernetes CSI plugin to automatically mount signed certificates to Pods using ephemeral volumes (Go)
• awesome - cert-manager/csi-driver - A Kubernetes CSI plugin to automatically mount signed certificates to Pods using ephemeral volumes (Go)

README

        


  





  

  

  



# csi-driver

csi-driver is a Container Storage Interface (CSI) driver plugin for Kubernetes

to work along [cert-manager](https://cert-manager.io/). The goal for this plugin

is to facilitate requesting and mounting certificate key pairs to pods

seamlessly. This is useful for facilitating mTLS, or otherwise securing

connections of pods with guaranteed present certificates whilst having all of

the features that cert-manager provides.

## Why a CSI Driver?

- Ensure private keys never leave the node and are never sent over the network.

  All private keys are stored locally on the node.

- Unique key and certificate per application replica with a grantee to be

  present on application run time.

- Reduce resource management overhead by defining certificate request spec

  in-line of the Kubernetes Pod template.

- Automatic renewal of certificates based on expiry of each individual

  certificate.

- Keys and certificates are destroyed during application termination.

- Scope for extending plugin behaviour with visibility on each replica's

  certificate request and termination.

## Documentation

Please follow the documentation at

[cert-manager.io](https://cert-manager.io/docs/projects/csi-driver/) for

installing and using csi-driver.

## Release Process

The release process is documented in [RELEASE.md](RELEASE.md).