8000 best way to create certificate for each pod in a deployment · Issue #4 · smallstep/autocert · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
best way to create certificate for each pod in a deployment #4
Open
@etfeet

Description

@etfeet

How would I go about creating per pod certificate annotations?

Looking through the kubernetes / helm docs I'm not seeing an easy way. From what i can see i can only add the annotations after the pod has been created but then the certificates won't get created/injected since the init container for pod will have already run. I can create a annotation for the deployment but that just creates a single certificate for the cluster / workload and not for each individual pod.

Would it be possible to add an autocert.step.sm/enabled and if autocert.step.sm/name is not set it defaults to creating and injecting a certificate for each pod in the deployment/statefulset, etc or alternatively issue a san cert that has the cn for each pod in the deployment?

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0