hashicorp / hashicorp/vault-secrets-operator

Add support for keystores in VaultPKISecret

Open
#346 3 comments 0 reactions 0 assignees View on GitHub
enhancement PKI
Dominant language
Go
Stars
600
Forks
146
Avg merge
3d 8h
Merged PRs (30d)
6

Description

Hello,

Some apps need certificate stored in password protected PKCS12 keystore.

I currently use cert-manager Certificate with this config for creating password protected keystore.

~~~
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
name: certificate-example
spec:
commonName: example
issuerRef:
group: cert-manager.io
kind: ClusterIssuer
name: issuer
keystores:
pkcs12:
create: true
passwordSecretRef:
key: password
name: keycloak-pkcs12
secretName: certificate-secret
~~~

That add a **keystore.p12** and a **truststore.p12** keys to the created Kubernetes secret which can be mount as Kubernetes volume.

Can you add PKCS12 keystores support to VaultPKISecret ?

Thank's.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the VaultPKISecret implementation and its Kubernetes Secret output handling. Compare the requested cert-manager keystores.pkcs12 configuration, including passwordSecretRef, with the existing resource behavior. Done means VaultPKISecret can produce password-protected keystore.p12 and truststore.p12 entries in a mounted Kubernetes Secret.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
devops, infrastructure
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.