3 ms·
> Citadel - A centralized component responsible for certificate issuance and rotation. That interests me, while I know nothing about istio, I'd love to have so
by fosco 8y ago
> Citadel - A centralized component responsible for certificate issuance and rotation.
That interests me, while I know nothing about istio, I'd love to have something like his for me personally, if I understand correctly this could centrally manage certificates used as password and their management?
- danberg 8y agoCitadel does as you say specifically for secure communication between services (i.e., mTLS).
- rexarex 8y agoIt basically automatically issues certificates to pods so they can use mTLS seamlessly when they communicate with each other. More of authentication/authorization piece.
- kkapelon 8y agoVault from Hashicorp (and its competitors) is probably better suited for what you ask
- fosco 8y agothank you for sharing, I will look into this, much appreciated!
- nprateem 8y agoCert manager [1] also automatically provisions and rotates TLS certificates. [1] http://cert-manager.readthedocs.io/ http://cert-manager.readthedocs.io/