kubecsr

Kubernetes CSR utilities

DO NOT DEPEND ON ANYTHING IN THIS REPO

This is a scratch space for experiments around Kubernetes TLS bootstrapping. We plan for this repo to hold CSR sidecars, cloud integrated signers, and CSR approvers. As these components mature, and if others find them useful, hopefully they can find other homes. Possibly as a Kubernetes incubator project.

Documentation for tools in this repo

1. Kube AWS Approver
2. etcd Certificate Generator

Development guide

Building binaries

Run make all to build binarys to _output/bin/linux/ directory location.

Run make check to run basic checks like gofmt, golint, go vet, dep transitive dependency check, and all unit tests.

Run make vendor to update vendor/. make vendor runs dep ensure command.

Building image

Make sure you have built the latest binary by running make all.

Then to build an image run,

BUILD_IMAGE=<tool-name> ./scripts/build-image.sh

To build anf push the image run,

PUSH_IMAGE=true BUILD_IMAGE=<tool-name> ./scripts/build-image.sh