⚙️ A certificate issuer for cert-manager using step certificates CA.
To learn more, visit https://github.com/smallstep/step-issuer.
helm install step-issuer step-issuer- Kubernetes 1.10+
To install the chart with the release name step-issuer:
helm install step-issuer step-issuerThe command deploys step-issuer on the Kubernetes cluster with the default configuration.
Tip: List all releases using
helm list
To uninstall/delete the step-issuer deployment:
helm uninstall step-issuerThe command removes all the Kubernetes components associated with the chart and deletes the release.
The following table lists the configurable parameters of the Step Issuer chart and their default values.
| Parameter | Description | Default |
|---|---|---|
replicaCount |
Number of Step Issuer replicas. | 1 |
image.repository |
Repository of the Step Issuer image. | cr.step.sm/smallstep/step-issuer |
image.tag |
Tag of the image. If empty it will use .Chart.appVersion. | "" |
image.pullPolicy |
Step Issuer image pull policy | IfNotPresent |
deployment.args.enableLeaderElection |
Enable k8s controller leader election. | true |
deployment.args.disableApprovalCheck |
To disable cert-manager approvals on old version of cert-manager. | false |
stepIssuer.create |
If we should automatically create a StepIssuer | false |
stepIssuer.caUrl |
Step Certificates CA URL. This is usually the step certificates service FQDN. | "" |
stepIssuer.caBundle |
Step Certificates root certificate in a single-line base64 string. | "" |
stepIssuer.provisioner.name |
Name of the provisioner used for authorizing the sign of certificates. | "" |
stepIssuer.provisioner.kid |
Key id of the provisioner used for authorizing the sign of certificates. | "" |
stepIssuer.provisioner.passwordRef.name |
Name of the secret with the provisioner password. | "" |
stepIssuer.provisioner.passwordRef.key |
Key name in the the secret with the provisioner password. | "" |
stepClusterIssuer.create |
If we should automatically create a StepClusterIssuer | false |
stepClusterIssuer.caUrl |
Step Certificates CA URL. This is usually the step certificates service FQDN. | "" |
stepClusterIssuer.caBundle |
Step Certificates root certificate in a single-line base64 string. | "" |
stepClusterIssuer.provisioner.name |
Name of the provisioner used for authorizing the sign of certificates. | "" |
stepClusterIssuer.provisioner.kid |
Key id of the provisioner used for authorizing the sign of certificates. | "" |
stepClusterIssuer.provisioner.passwordRef.name |
Name of the secret with the provisioner password. | "" |
stepClusterIssuer.provisioner.passwordRef.key |
Key name in the the secret with the provisioner password. | "" |
stepClusterIssuer.provisioner.passwordRef.namespace |
Namespace where the provisioner password secret resides. | "" |