Skip to content

Addon for cert-manager that issues certificates using Infisical PKI

Notifications You must be signed in to change notification settings

Infisical/infisical-issuer

Repository files navigation

infisical

The open-source secret management platform: Sync secrets/configs across your team/infrastructure and prevent secret leaks.

Introduction

Infisical PKI is an Infisical service that can setup and manage private CAs, as well as issue private certifiates.

cert-manager is a Kubernetes add-on to automate the management and issuance of TLS certificates from various issuing sources. It ensures that certificates are valid and up to date periodically, and attempts to renew certificates at an appropriate time before expiry.

Infisical PKI Issuer is an addon (see https://cert-manager.io/docs/configuration/external/) to cert-manager that signs off certificate requests using Infisical PKI. The issuer is perfect for getting X.509 certificates for ingresses and other Kubernetes resources and capable of automatically renewing certificates as needed.

For information on how to use the issuer, please refer to the Infisical PKI Issuer documentation here.

Security

Please do not file GitHub issues or post on our public forum for security vulnerabilities, as they are public!

Infisical takes security issues very seriously. If you have any concerns about Infisical or believe you have uncovered a vulnerability, please get in touch via the e-mail address security@infisical.com. In the message, try to provide a description of the issue and ideally a way of reproducing it. The security team will get back to you as soon as possible.

Note that this security address should be used only for undisclosed vulnerabilities. Please report any security problems to us before disclosing it publicly.

Contributing

Whether it's big or small, we love contributions. Check out our guide to see how to get started.

Not sure where to get started? Join our Slack, and ask us any questions there.