cf-for-k8s
cf-for-k8s copied to clipboard
cloudfoundry
Platform engineers want cf-for-k8s to generate certificates automatically
Summary
This feature enables the generation of certificates in the cluster. With this feature, Platform engineers are relieved of manually passing a certificate or (or running the hack script). e.g. uaa-certs or ingress cert are examples of properties that take certs
Intended Outcome
It enhances the Platform engineer's experience and relieves them from generating or rotating certs in the future (see another Feature request on certs rotation).
What alternatives were considered
Users use a bosh-cli based hack script to generate the certs.
How will it work
Use the Quarks project to generate and rotate certs. In addition, Quarks can use Cert-manager to generate certs using a public CA provider.
We have created an issue in Pivotal Tracker to manage this:
https://www.pivotaltracker.com/story/show/174184786
The labels on this github issue will be updated when the story is started.
Hi there, I just wanted to query about the planned implementation for this. We already use cert-manager and manager our own certs. I would be concerned about cf-for-k8s not playing well with clusters that already use cert-manager (which will probably be many)
