Skip to content

diagridio/dapr-cert-manager

Repository files navigation

dapr-cert-manager

dapr-cert-manager is a simple controller to allow dapr installations to use Certificates originating from cert-manager. This controller watches a cert-manager Certificate object for the root dapr-trust-bundle.

As and when the corresponding cert-manager Certificate object becomes ready or renews, dapr-cert-manager will update the respective Secret object with the latest certificate and key.

Root CA certificates are always appended to, and never replaced.

dapr-cert-manager can also optionally replace the root CA certificates in the target Secret with a custom CA certificate from file.


Installation

Ensure cert-manager is installed, and the corresponding Certificates have been created.

Please see the example manifest for an example of how your cert-manager Certificates could be arranged.

The helm values file shows all available configuration options.

  helm upgrade -i dapr-cert-manager ./deploy/charts/dapr-cert-manager \
    --namespace dapr-cert-manager \
    --create-namespace \
    --set app.trustBundleCertificateName=dapr-trust-bundle \
    --wait