micahhausler/k8s-acme-cache
An ACME cache that stores keys as Kubernetes secrets in Golang
Image
0
733
micahhausler/k8s-acme-cache repository overview
k8s-acme-cache
An ACME autocert cache that stores keys as Kubernetes secrets.
See the example application for a full example, but the basic usage looks like this
import (
"github.com/micahhausler/k8s-acme-cache"
"golang.org/x/crypto/acme/autocert"
"k8s.io/client-go/kubernetes"
)
cache := k8s_acme_cache.KubernetesCache(
"my-acme-secret.secret", // Secret Name
"default", // Namespace
client, // Kubernetes client-go *kubernetes.ClientSet
0, // Deletion Grace Period in seconds
)
certManager := autocert.Manager{
Prompt: autocert.AcceptTOS,
HostPolicy: autocert.HostWhitelist("example.com"), //your domain here
Cache: cache,
}
Required RBAC permissions
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: Role
metadata:
name: <role-name>
rules:
- apiGroups:
- ""
resources:
- secret
resourceNames:
- <secret-name>
verbs:
- get
- create
- update
You'll also need a RoleBinding to bind the above role to the ServiceAccount
the application is assigned.
If the secret you want to use is in a different namespace than the application,
use a ClusterRole, and a ClusterRoleBinding
License
MIT License. See License for full text
Tag summary
Content type
-
Digest
Size
123.2 MB
Last updated
over 9 years ago
docker pull micahhausler/k8s-acme-cache