From 03a2c21accdca53146469accc955955f954a00ab Mon Sep 17 00:00:00 2001 From: Martin Montes Date: Sat, 11 May 2024 23:12:52 +0200 Subject: [PATCH] Added cert-manager and openssl plugins. Signed-off-by: Martin Montes --- plugins/cert-manager.yaml | 36 ++++++++++++++++++++++++++++++++++++ plugins/openssl.yaml | 25 +++++++++++++++++++++++++ 2 files changed, 61 insertions(+) create mode 100644 plugins/cert-manager.yaml create mode 100644 plugins/openssl.yaml diff --git a/plugins/cert-manager.yaml b/plugins/cert-manager.yaml new file mode 100644 index 0000000000..9c3f1aff41 --- /dev/null +++ b/plugins/cert-manager.yaml @@ -0,0 +1,36 @@ +# Manage cert-manager Certificate resouces via cmctl. +# See: https://github.com/cert-manager/cmctl +plugins: + cert-status: + shortCut: Shift-S + confirm: false + description: Certificate status + scopes: + - certificates + command: bash + background: false + args: + - -c + - "cmctl status certificate --context $CONTEXT -n $NAMESPACE $NAME |& less" + cert-renew: + shortCut: Shift-R + confirm: false + description: Certificate renew + scopes: + - certificates + command: bash + background: false + args: + - -c + - "cmctl renew --context $CONTEXT -n $NAMESPACE $NAME |& less" + secret-inspect: + shortCut: Shift-I + confirm: false + description: Inspect secret + scopes: + - secrets + command: bash + background: false + args: + - -c + - "cmctl inspect secret --context $CONTEXT -n $NAMESPACE $NAME |& less" \ No newline at end of file diff --git a/plugins/openssl.yaml b/plugins/openssl.yaml new file mode 100644 index 0000000000..c21bf31631 --- /dev/null +++ b/plugins/openssl.yaml @@ -0,0 +1,25 @@ +# Inspect certificate chains with openssl. +# See: https://github.com/openssl/openssl. +plugins: + secret-openssl-ca: + shortCut: Ctrl-O + confirm: false + description: Openssl ca.crt + scopes: + - secrets + command: bash + background: false + args: + - -c + - kubectl get secret --context $CONTEXT -n $NAMESPACE $NAME -o jsonpath='{.data.ca\.crt}' | base64 -d | openssl storeutl -noout -text -certs /dev/stdin |& less + secret-openssl-tls: + shortCut: Shift-O + confirm: false + description: Openssl tls.crt + scopes: + - secrets + command: bash + background: false + args: + - -c + - kubectl get secret --context $CONTEXT -n $NAMESPACE $NAME -o jsonpath='{.data.tls\.crt}' | base64 -d | openssl storeutl -noout -text -certs /dev/stdin |& less \ No newline at end of file