Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Use-Case] Internal CA with Vault and Cert-manager #1409

Open
3 tasks
matttrach opened this issue Sep 13, 2024 · 6 comments
Open
3 tasks

[Use-Case] Internal CA with Vault and Cert-manager #1409

matttrach opened this issue Sep 13, 2024 · 6 comments
Assignees

Comments

@matttrach
Copy link
Collaborator

When Installing Rancher via helm there are a number of requirements including an ingress and the associated Load balancer, dns configuration and certificate considerations.
User uses Terraform to install Rancher via helm (onto an EKS cluster), but they are finding the process complex as they are also trying to integrate Vault and cert-manager to provide the ingress certificates from their internal CA.

Describe the solution you'd like

  • Rancher installed on EKS
  • Stand-alone Vault acting as internal CA
  • Cert-Manager talking to Vault to get certificates
@matttrach matttrach self-assigned this Sep 13, 2024
@matttrach
Copy link
Collaborator Author

The end result of this issue should be an E2E test validating the use case.

@matttrach
Copy link
Collaborator Author

Usually when I see the Vault internal CA use case it is to achieve an air-gapped deployment, but this use case specifically mentions EKS. What is the goal of using Vault over a free certificate creation platform like Let's Encrypt?

@matttrach
Copy link
Collaborator Author

I would like an example Vault config to fully understand this use case if possible.

@matttrach
Copy link
Collaborator Author

I made the assumption that Vault is stand alone, but there is also the possibility of Vault installed on the same kubernetes cluster as Rancher, where is Vault installed?

@matttrach
Copy link
Collaborator Author

What version of Kubernetes is in use? What version of Rancher, if using one of our kubernetes distributions (I recommend RKE2), what version of those are in use?

@matttrach
Copy link
Collaborator Author

What version of Terraform is in use?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant