https://github.com/cert-manager/signer-venafi
Experimental Venafi based signer for Kubernetes 1.18 CSR API https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/20190607-certificates-api.md#signers
https://github.com/cert-manager/signer-venafi
Last synced: 6 months ago
JSON representation
Experimental Venafi based signer for Kubernetes 1.18 CSR API https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/20190607-certificates-api.md#signers
- Host: GitHub
- URL: https://github.com/cert-manager/signer-venafi
- Owner: cert-manager
- License: apache-2.0
- Archived: true
- Created: 2020-05-13T09:47:21.000Z (about 6 years ago)
- Default Branch: master
- Last Pushed: 2020-07-21T15:27:01.000Z (almost 6 years ago)
- Last Synced: 2025-10-09T12:21:30.069Z (9 months ago)
- Language: Go
- Size: 178 KB
- Stars: 4
- Watchers: 1
- Forks: 4
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# signer-venafi
Experimental Venafi based signer for Kubernetes 1.18 CSR API https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/20190607-certificates-api.md#signers
## Demos
* [Example Signer](docs/demos/example-signer/README.md): demonstrates the simplest possible deployment, where the signer will sign CSRs having the signer name `example.com/foo`.
* [Bootstrapping a Kubernetes Cluster using Kubeadm and signer-venafi](docs/demos/kubelet-signer/README.md): demonstrates how to bootstrap a Kubernetes using "Kubeadm External CA Mode" to create the control-plane certificates and `signer-venafi` to sign the dynamically generated Kubelet certificates.
## Test
To run tests using in-memory fake Signer and fake vcert client.
```
make test
```
Or to run the Signer tests against a real Venafi TPP instance,
create a vcert.ini file and supply the path to that file as an environment variable for, as follows:
```
cat < vcert.tpp.ini
tpp_url = https://tpp.example.com/vedsdk
tpp_user =
tpp_password =
tpp_zone = TLS/SSL\Certificates\For\Example
EOF
VCERT_CONFIG_FILE=$PWD/vcert.tpp.ini make test
```