Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update helm standalone TLS doc for k8s 1.22 #16029

Merged
merged 2 commits into from
Jun 17, 2022

Conversation

swenson
Copy link
Contributor

@swenson swenson commented Jun 16, 2022

The CertificateSigningRequest for v1beta1 API is no longer
available, and now requires the signerName parameter.

Many thanks to @DavidRBanks for the helpful notes in
hashicorp/vault-helm#243 (comment)

I tested this on Kubernetes 1.21 and 1.24. I also adjusted the tr
command to work better on macOS (and still works fine on Linux).

The `CertificateSigningRequest` for `v1beta1` API is no longer
available, and now requires the `signerName` parameter.

Many thanks to @DavidRBanks for the helpful notes in
hashicorp/vault-helm#243 (comment)

I tested this on Kubernetes 1.21 and 1.24. I also adjusted the `tr`
command to work better on macOS (and still works fine on Linux).
Copy link
Member

@tvoran tvoran left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great! Just a couple suggestions.

export TMPDIR=/tmp

# CSR_NAME will be the name of our certificate signing request as seen by Kubernetes.
export CSR_NAME=vault-csr
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

May want to update the opening sentence here since it states There are three variables...

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@swenson
Copy link
Contributor Author

swenson commented Jun 17, 2022

Thanks!

@swenson swenson merged commit 2a69947 into main Jun 17, 2022
@swenson swenson deleted the docs/vault-4347/standalone-tls-1.22 branch June 17, 2022 17:07
swenson added a commit that referenced this pull request Jun 17, 2022
Update helm standalone TLS doc for k8s 1.22

The `CertificateSigningRequest` for `v1beta1` API is no longer
available, and now requires the `signerName` parameter.

Many thanks to @DavidRBanks for the helpful notes in
hashicorp/vault-helm#243 (comment)

I tested this on Kubernetes 1.21 and 1.24. I also adjusted the `tr`
command to work better on macOS (and still works fine on Linux).
swenson added a commit that referenced this pull request Jun 17, 2022
Update helm standalone TLS doc for k8s 1.22

The `CertificateSigningRequest` for `v1beta1` API is no longer
available, and now requires the `signerName` parameter.

Many thanks to @DavidRBanks for the helpful notes in
hashicorp/vault-helm#243 (comment)

I tested this on Kubernetes 1.21 and 1.24. I also adjusted the `tr`
command to work better on macOS (and still works fine on Linux).

Co-authored-by: Christopher Swenson <swenson@swenson.io>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants