Building cert-manager: Migrating Thousands of Users from kube-lego to use CRDs - James Munnelly

Опубликовано: 27 Декабрь 2024
на канале: CNCF [Cloud Native Computing Foundation]

934

Want to view more sessions and keep the conversations going? Join us for KubeCon + CloudNativeCon North America in Seattle, December 11 - 13, 2018 (http://bit.ly/KCCNCNA18) or in Shanghai, November 14-15 (http://bit.ly/kccncchina18).

Building cert-manager: Migrating Thousands of Users from kube-lego to use CRDs - James Munnelly, Jetstack (Intermediate Skill Level)

cert-manager is a new project, built to replace kube-lego and make x509 certificates first class citizens in Kubernetes. Using custom resource definitions to introduce the concept of Issuers into a cluster, end-users can request signed TLS certificates from an ACME server (e.g. Let’s Encrypt), a signing key pair, Hashicorp Vault, or your organisations custom CA through its extensible design. This talk presents cert-manager and demonstrates its new features over its predecessor, and specifically our approach to migrate thousands of users from kube-lego to the new custom resource backed system, without hindering future cert-manager functionality or effecting production users. At the end, we’ll go over the roadmap and future plans for the project, as well as how you can get involved!

About James
James is a Solutions Engineer at Jetstack, which involves helping customers bend and break Kubernetes to their will. He's created a number of extensions to Kubernetes core, including cert-manager (a kube-lego successor), Navigator (DBaaS for Kubernetes), a simple cloud provider for bare metal clusters as well as various contributions to the upstream API machinery.- Wrangling Kubernetes API Internals https://skillsmatter.com/skillscasts/... - Extending the Kubernetes API: what the docs don't tell you https://kccncna17.sched.com/event/CU6...
Join us for KubeCon + CloudNativeCon in Barcelona May 20 - 23, Shanghai June 24 - 26, and San Diego November 18 - 21! Learn more at https://kubecon.io. The conference features presentations from developers and end users of Kubernetes, Prometheus, Envoy and all of the other CNCF-hosted projects.