Certificates with Azure Key Vault and Nginx Ingress Controller

Подписаться 3 тыс.

Просмотров 6 тыс.

50% 1

A quick walkthrough of pulling a certificate from Azure Key Vault to Azure Kubernetes Service and using it with Nginx Ingress Controller
Blog post: blog.baeke.inf...
Alternative option with secrets store CSI driver: blog.baeke.inf...
#kubernetes #ingress #certificates #azure

Опубликовано:

21 окт 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 6

@kalyanguruju 3 года назад

Greatly and neatly explained with so much clarity

@HoussemDellai Год назад

Thank you very much Geert :) your video is really helpful

@hiuhehe 3 года назад

Hi @Geert, great video. Have you tried akv secret store csi to sync cert? Is there an advantage of using akv2aks components?

@GeertBaeke 3 года назад

I have worked with the secrets store CSI driver and the provider for Azure Key Vault. The advantage is of course its support for multiple providers and not just Key Vault. In general though, if it's AKS and Key Vault, I tend to go for this akv2k8s controller due to its simplicity. The CSI driver is a bit more complex. akv2aks also has an injector if you want to inject secrets into pods directly... Thanks for watching!

@AlfieSong 3 года назад

Hi @Geert, does akv2k8s controller only syncs self-signed cert from KV? I tried with a certificate issued by an integrated CA in KV and it does not work, it did generated a tls secret but when I run kubectl view cert, it return empty. When try use this tls secret in ingress and deploy, the cert shows invalid:NET::ERR_CERT_AUTHORITY_INVALID and has the wrong issuer, it shows Issued by: Kubernetes Ingress Controller Fake Certificate.