kadras-io / package-for-secretgen-controller

Kubernetes-native package for secretgen-controller, a cloud-native solution to generate and share Secrets, passwords, keys, and certificates.

secretgen-controller

A Carvel package for secretgen-controller, a cloud-native solution to generate and share Secrets, passwords, keys, and certificates.

🚀  Getting Started

Prerequisites

• Kubernetes 1.28+

• Carvel kctrl CLI.

• Carvel kapp-controller deployed in your Kubernetes cluster. You can install it with Carvel kapp (recommended choice) or kubectl.

  kapp deploy -a kapp-controller -y \
    -f https://github.com/carvel-dev/kapp-controller/releases/latest/download/release.yml

Installation

Add the Kadras package repository to your Kubernetes cluster:

kctrl package repository add -r kadras-packages \
  --url ghcr.io/kadras-io/kadras-packages \
  -n kadras-system --create-namespace

Installation without package repository

The recommended way of installing the secretgen-controller package is via the Kadras package repository. If you prefer not using the repository, you can add the package definition directly using kapp or kubectl.

kubectl create namespace kadras-system
kapp deploy -a secretgen-controller-package -n kadras-system -y \
  -f https://github.com/kadras-io/package-for-secretgen-controller/releases/latest/download/metadata.yml \
  -f https://github.com/kadras-io/package-for-secretgen-controller/releases/latest/download/package.yml

Install the secretgen-controller package:

kctrl package install -i secretgen-controller \
  -p secretgen-controller.packages.kadras.io \
  -v ${VERSION} \
  -n kadras-system

Note You can find the ${VERSION} value by retrieving the list of package versions available in the Kadras package repository installed on your cluster.

kctrl package available list -p secretgen-controller.packages.kadras.io -n kadras-system

Verify the installed packages and their status:

kctrl package installed list -n kadras-system

📙  Documentation

Documentation, tutorials and examples for this package are available in the docs folder. For documentation specific to secretgen-controller, check out github.com/carvel-dev/secretgen-controller.

🛡️  Security

The security process for reporting vulnerabilities is described in SECURITY.md.

🖊️  License

This project is licensed under the Apache License 2.0. See LICENSE for more information.

package-for-secretgen-controller's Issues

Add pull request template

Add contributing guidelines

Test against Kyverno Policies for Pod Security Standards

After a Carvel package for the Kyverno Policies is available, add tests to verify the cert-manager package compliance to the Pod Security Standards.

See: https://kyverno.io/policies/pod-security/

Support and document private registry

• Find strategy for private registry when relocated bundle
• Docs on configuring a private registry
• Integration tests

Consider network policies

Restrict Auto-Mount of Service Account Tokens

See: https://kyverno.io/policies/other/restrict-automount-sa-token/restrict-automount-sa-token/

Add SVG logo to package metadata