kube-cert-manager

README

Kubernetes Certificate Manager

This project is loosely based on https://github.com/kelseyhightower/kube-cert-manager It took over most of its documentation, license, as well as the general approach to how things work.

The code itself however, was entirely reimplemented to use xenolf/lego as the basis instead of reimplemented an ACME client + dns plugins

Features

• Manage Kubernetes TLS secrets backed by Let's Encrypt issued certificates.
• Manage Let's Encrypt issued certificates based on Kubernetes ThirdParty Resources.
• Domain validation using ACME HTTP-01, SNI-TLS-01 or DNS-01 challenges.
• Support for multiple challenge providers.

Project Goals

• Demonstrate how to build custom Kubernetes controllers.
• Demonstrate how to use Kubernetes Third Party Resources.
• Demonstrate how to interact with the Kubernetes API (watches, reconciliation, etc).
• Demonstrate how to write great documentation for Kubernetes add-ons and extensions.
• Promote the usage of Let's Encrypt for securing web applications running on Kubernetes.

Requirements

• Kubernetes 1.3+
• At least one configured challenge provider

Usage

• Deployment Guide
• Creating a Certificate
• Deleting a Certificate
• Consuming Certificates

Documentation

• Certificate Third Party Resources
• Certificate Objects
• Challenge providers