Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/kelseyhightower/kube-cert-manager

Manage Lets Encrypt certificates for a Kubernetes cluster.
https://github.com/kelseyhightower/kube-cert-manager

Last synced: 1 day ago
JSON representation

Manage Lets Encrypt certificates for a Kubernetes cluster.

Awesome Lists containing this project

README

        

# Kubernetes Certificate Manager

This is not an official Google Project.

## Features

* Manage Kubernetes TLS secrets backed by Let's Encrypt issued certificates.
* Manage [Let's Encrypt](https://letsencrypt.org) issued certificates based on Kubernetes ThirdParty Resources.
* Domain validation using ACME [dns-01 challenges](https://letsencrypt.github.io/acme-spec/#rfc.section.7.4).
* Support for multiple DNS providers via [dns-01 exec plugins](https://github.com/kelseyhightower/dns01-exec-plugins)

> The secrets created by the Kubernetes Certificate Manager can be used to configure any TLS terminating load balancer.

## Project Goals

* Demonstrate how to build custom Kubernetes controllers.
* Demonstrate how to use Kubernetes [Third Party Resources](https://github.com/kubernetes/kubernetes/blob/release-1.3/docs/design/extending-api.md).
* Demonstrate how to interact with the Kubernetes API (watches, reconciliation, etc).
* Demonstrate how to write great documentation for Kubernetes add-ons and extensions.
* Promote the usage of Let's Encrypt for securing web applications running on Kubernetes.

## Popular Forks

The Kubernetes Certificate Manager has inspired many projects which have added new features and additional domain validation methods.

* [PalmStoneGames/kube-cert-manager](https://github.com/PalmStoneGames/kube-cert-manager)

## Requirements

* Kubernetes 1.3+
* A registered DNS domain hosted by a supported [DNS provider](docs/plugins.md)

## Usage

* [Deployment Guide](docs/deployment-guide.md)
* [Creating a Certificate](docs/create-a-certificate.md)
* [Deleting a Certificate](docs/delete-a-certificate.md)
* [Consuming Certificates](docs/consume-certificates.md)

## Documentation

* [Certificate Third Party Resources](docs/certificate-third-party-resource.md)
* [Certificate Objects](docs/certificate-objects.md)
* [DNS Provider Plugins](docs/plugins.md)