https://github.com/cognifloyd/helm-gen-self-signed-cert

A Helm chart that generates a self signed cert and saves it in a k8s Secret.
https://github.com/cognifloyd/helm-gen-self-signed-cert

helm k8s secret self-signed-certificate tls x509

Last synced: 20 days ago
JSON representation

A Helm chart that generates a self signed cert and saves it in a k8s Secret.

• Host: GitHub
• URL: https://github.com/cognifloyd/helm-gen-self-signed-cert
• Owner: cognifloyd
• Created: 2021-09-08T23:58:42.000Z (about 3 years ago)
• Default Branch: main
• Last Pushed: 2021-09-09T02:01:10.000Z (about 3 years ago)
• Last Synced: 2024-10-12T12:17:27.861Z (about 1 month ago)
• Topics: helm, k8s, secret, self-signed-certificate, tls, x509
• Language: Smarty
• Homepage:
• Size: 24.4 KB
• Stars: 0
• Watchers: 3
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# `helm-gen-self-signed-cert` Helm Chart

A Helm chart that generates a self signed cert and saves it in a k8s Secret.

> Do not use this chart for publicly accessible services! If that's what you need

> try Let's Encrypt, cert-manager, or some other certificate generation service.

This is a companion chart to be used alongside other helm-charts. It uses helm/sprig functions to

generate a self-signed TLS/x.509 cert. It generates an ephemeral CA, and then generates a signed

cert using that CA. By default, the cert is good for 365 days, but you can configure that.

We regenerate when 'renew' was requested, the secret doesn't exist, or the filenames are not in previous secret.

Only use this chart if the security trade-offs for self-signed certs are acceptable

in your (firewalled) k8s cluster. If not, consider using Let's Encrypt, cert-manager,

or some other service.