hashicorp / hashicorp/vault-secrets-operator
Add support for keystores in VaultPKISecret
- Dominant language
- Go
- Stars
- 600
- Forks
- 146
- Avg merge
- 3d 8h
- Merged PRs (30d)
- 6
Description
Hello,
Some apps need certificate stored in password protected PKCS12 keystore.
I currently use cert-manager Certificate with this config for creating password protected keystore.
~~~
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: certificate-example
spec:
commonName: example
issuerRef:
group: cert-manager.io
kind: ClusterIssuer
name: issuer
keystores:
pkcs12:
create: true
passwordSecretRef:
key: password
name: keycloak-pkcs12
secretName: certificate-secret
~~~
That add a **keystore.p12** and a **truststore.p12** keys to the created Kubernetes secret which can be mount as Kubernetes volume.
Can you add PKCS12 keystores support to VaultPKISecret ?
Thank's.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the VaultPKISecret implementation and its Kubernetes Secret output handling. Compare the requested cert-manager keystores.pkcs12 configuration, including passwordSecretRef, with the existing resource behavior. Done means VaultPKISecret can produce password-protected keystore.p12 and truststore.p12 entries in a mounted Kubernetes Secret.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- devops, infrastructure
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100