certificate-init-container
Bootstrap TLS certificates for Pods using the Kubernetes certificates API.
by kelseyhightowerGo
Commit activity
Last 12 weeks · 0 commits
Community health
2 of 6 standards met
42
✓README✓License○Contributing○Code of Conduct○Issue Template○PR Template
Recent PRs & issues
Quiet · 5 in progress · Last activity 6y ago
See all on GitHub →
1. Making key length configurable 2. csr object isn't namespaced anymore
I have a use-case that requires me to specify a bespoke common name (CN) that is different from the first DNS name (). It'd be nice to have a flag that let's me overwrite the common name so that it's different from the first DNS name.
I have a use-case that requires me to set the OU (Organizational Unit) and SN (Serial Number). It'd be nice to have a flag that lets me set the OU, and a flag that lets me set the SN or have the SN autogenerated.
Recent fixes
Including the loopback IP in a SAN is a poor security practice. It can be added as a service IP if needed.
1. Making key length configurable 2. csr object isn't namespaced anymore
Structured data for AI agents
Repository: kelseyhightower/certificate-init-container. Description: Bootstrap TLS certificates for Pods using the Kubernetes certificates API. Stars: 148, Forks: 51. Primary language: Go. Languages: Go (100%). License: Apache-2.0. Open PRs: 5, open issues: 6. Last activity: 6y ago. Community health: 42%. Top contributors: kelseyhightower, angeloxx.