kcert
kcert copied to clipboard
nabsul
External Account Binding for KCert client with ACME
As discussed in #49 attempting to add EAB account registration to KCert.
For testing, you can run kcert locally with dotnet run. It will automatically use your kubectl credentials to connect to kubernetes.
Instead of environment variable I use dotnet user secrets: https://docs.microsoft.com/en-us/aspnet/core/security/app-secrets#enable-secret-storage
I thought a little more about testing, and I think that won't work actually. You can tun KCert locally as I described, but I don't think renewals will work properly. You'll need to deploy a test version to try it out.
Sure thanks for the pointers on testing locally. I was a still seeing outage and incredibly slow response times on ZeroSSL today, have not been able to figure out a different SSL service that could let me quickly set up a test for ACME EAB. Shall prod around with SSL.com maybe and see if something can come out of there. Shall test before marking the draft PR ready for review.
This feature was completed by @Zegorax and is now merged into main. It will be in the next release after testing is compelted.