thejsj/auto-kubernetes-lets-encrypt

Automatic Generation of Let's Encrypt Certs for Kubernetes

Auto Kuberentes Lets's Encrypt

Generate TSL/SSL certs through your kubernetes cluter automatically with Let's Encrypt

How To Use

1. Generate The Kubernetes Resources

./generate-resources $DOMAIN $EMAIL

2. Apply Part 1 To Cluster

kubectl apply -f ./kubernetes-resources-part-1.yml

3. Update DNS

watch "kubectl get svc auto-kubernetes-lets-encrypt"

Take the IP address from the service and update your DNS settings.

4. Apply Part 2 and Wait for Job and Get Certificates

kubectl apply -f ./kubernetes-resources-part-1.yml
watch "kubectl get job auto-kubernetes-lets-encrypt"
kubectl describe secret auto-kubernetes-lets-encrypt

You're Done!

You will now find the certificates for the domain in your auto-kubernetes-lets-encrypt secret:

$ kubectl describe secret auto-kubernetes-lets-encrypt
Name:		auto-kubernetes-lets-encrypt
Namespace:	default
Labels:		<none>
Annotations:
Type:		Opaque

Data
====
$DOMAIN.issuer.crt:	1647 bytes
$DOMAIN.json:		228 bytes
$DOMAIN.key:		1679 bytes
$DOMAIN.pem:		3480 bytes
private_key:			1675 bytes
registration:			668 bytes
$DOMAIN.crt:		1801 bytes

auto-kubernetes-lets-encrypt's Issues

Suggestion: 3rd party type

It might be useful to turn this into a kubernetes 3rd party resource built on top of secrets.

Suggestion: config map

I think it might be better to change all optional values to is a config map. That way people can use the same deployment and only have to change the config file (config map for params, secret for the secret key)