Tonyh5chen / ejbca-k8s-csr-signer

Helm module that extends the K8S CertificateSigningRequest API

Community supported

We welcome contributions.

EJBCA Certificate Signing Request Proxy for K8s is open source and community supported, meaning that there is no SLA applicable for these tools.

To report a problem or suggest a new feature, use the Issues tab. If you want to contribute actual bug fixes or proposed enhancements, use the Pull requests tab.

EJBCA Certificate Signing Request Proxy for K8s

The EJBCA Certificate Signing Request Proxy for K8s forwards certificate signing requests generated by Kubernetes to EJBCA for signing by a trusted enterprise certificate authority. The signer operates within the K8s CertificateSigningRequests API and implements a Controller that uses the the V1 CertificateSigningRequests informer to handle associated resources. CSRs are only enrolled if they are approved using an approver.

• Getting Started
• Usage
  • Documentation
• License

Requirements

• EJBCA
  • EJBCA Enterprise (v7.7 +)
• Docker (to build the container)
  • Docker Engine or Docker Desktop
• Kubernetes (v1.19 +)
  • Kubernetes or Minikube
  • Or Kubernetes with Docker Desktop
• Helm (to deploy Kubernetes)
  • Helm (v3.1 +)

Contributing

The EJBCA Certificate Signing Request Proxy for K8s is an open source project. To contribute, see the contribution guidelines. Issues may also be reported.