tools for managing kubernetes certs with vault
Kubernetes Vault CSR tools.
Tools to manage and bootstrap Kubernetes certificates using Vault.
It can sign Kubernetes CSRs as a controller in order to facilitate Node cert rotation.
It also contains a tool for generating a bootstrap certificates that nodes can use in order to generate their initial certificate
--alsologtostderr log to standard error as well as files
-h, --help help for k8s-vault-csr
--log-flush-frequency duration Maximum number of seconds between log flushes (default 5s)
--log_backtrace_at traceLocation when logging hits line file:N, emit a stack trace (default :0)
--log_dir string If non-empty, write log files in this directory
--logtostderr log to standard error instead of files (default true)
--stderrthreshold severity logs at or above this threshold go to stderr (default 2)
-v, --v Level log level for V logs
--vmodule moduleSpec comma-separated list of pattern=N settings for file-filtered logging
- k8s-vault-csr bootstrap - create bootstrap certificate using vault
- k8s-vault-csr controller - run certificate signing controller
- k8s-vault-csr docs - generate markdown docs for commands
- k8s-vault-csr version - print the command version