Skip to content

Latest commit

 

History

History
69 lines (51 loc) · 5.58 KB

README.md

File metadata and controls

69 lines (51 loc) · 5.58 KB
Raw

Step Issuer

⚙️ A certificate issuer for cert-manager using step certificates CA.

For complete install instructions, visit https://github.com/smallstep/step-issuer.

TL;DR

helm repo add smallstep https://smallstep.github.io/helm-charts
helm repo update
helm install step-issuer smallstep/step-issuer

Prerequisites

  • Kubernetes 1.10+

Installing the Chart

To install the chart with the release name step-issuer:

helm install step-issuer smallstep/step-issuer

The command deploys step-issuer on the Kubernetes cluster with the default configuration.

Tip: List all releases using helm list

Uninstalling the Chart

To uninstall/delete the step-issuer deployment:

helm uninstall step-issuer

The command removes all the Kubernetes components associated with the chart and deletes the release.

Configuration

The following table lists the configurable parameters of the Step Issuer chart and their default values.

Parameter Description Default
replicaCount Number of Step Issuer replicas. 1
image.repository Repository of the Step Issuer image. cr.step.sm/smallstep/step-issuer
image.tag Tag of the image. If empty it will use .Chart.appVersion. ""
image.pullPolicy Step Issuer image pull policy IfNotPresent
deployment.args.enableLeaderElection Enable k8s controller leader election. true
deployment.args.disableApprovalCheck To disable cert-manager approvals on old version of cert-manager. false
stepIssuer.create If we should automatically create a StepIssuer false
stepIssuer.caUrl Step Certificates CA URL. This is usually the step certificates service FQDN. ""
stepIssuer.caBundle Step Certificates root certificate in a single-line base64 string. ""
stepIssuer.provisioner.name Name of the provisioner used for authorizing the sign of certificates. ""
stepIssuer.provisioner.kid Key id of the provisioner used for authorizing the sign of certificates. ""
stepIssuer.provisioner.passwordRef.name Name of the secret with the provisioner password. ""
stepIssuer.provisioner.passwordRef.key Key name in the the secret with the provisioner password. ""
stepClusterIssuer.create If we should automatically create a StepClusterIssuer false
stepClusterIssuer.caUrl Step Certificates CA URL. This is usually the step certificates service FQDN. ""
stepClusterIssuer.caBundle Step Certificates root certificate in a single-line base64 string. ""
stepClusterIssuer.provisioner.name Name of the provisioner used for authorizing the sign of certificates. ""
stepClusterIssuer.provisioner.kid Key id of the provisioner used for authorizing the sign of certificates. ""
stepClusterIssuer.provisioner.passwordRef.name Name of the secret with the provisioner password. ""
stepClusterIssuer.provisioner.passwordRef.key Key name in the the secret with the provisioner password. ""
stepClusterIssuer.provisioner.passwordRef.namespace Namespace where the provisioner password secret resides. ""