The *dch-webhooks* tool now provides an operation for hosts to request a signed SSH certificate from the SSH CA. It's primarily useful for unattended deployments like CoreOS Ignition, where hosts do not have any credentials to authenticate with the CA directly.
8 lines
134 B
YAML
8 lines
134 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
configMapGenerator:
|
|
- name: dch-root-ca
|
|
files:
|
|
- dch-root-ca.crt
|