kudecs

Kudecs

KUberenetes DEclarative Certificates as Secrets

How to use

Create the namespace, CRD, service account, cluster role, cluster role binding and deployment

kubectl create ns kudecs
kubectl apply -n kudecs -f https://raw.githubusercontent.com/kubernetes-misc/kudecs/master/install/crd.yaml
kubectl apply -n kudecs -f https://raw.githubusercontent.com/kubernetes-misc/kudecs/master/install/clusterrole.yaml
kubectl apply -n kudecs -f https://raw.githubusercontent.com/kubernetes-misc/kudecs/master/install/deployment.yaml

Check that you can see the changes

kubectl get all -n kudecs

Create a kudec CRD

kubectl apply -f https://raw.githubusercontent.com/kubernetes-misc/kudecs/master/examples/tiny-example.yaml

Check that you can see the changes

kubectl get kudecs -o yaml

Check the application logs to see what kudecs says about your kudec

kubectl logs deployment/kudecs

If everything went well you will be able to see secrets. Otherwise check the steps above.

kubectl get secrets -o yaml

Roadmap

Version 2

• HA support, deployment
• Namespace inclusions / exclusions
• Delete policy (managed / master-only)
• External certificate generation providers
• 2 stage certificates - provide and apply