CertificateSigningRequest [api_object]ai-synthesized · conf 0.82

CertificateSigningRequest objects provide a mechanism to obtain x509 certificates by submitting a certificate signing request, and having it asynchronously approved and issued. Kubelets use this API to obtain: 1. client certificates to authenticate to kube-apiserver (with the "kubernetes.io/kube-apiserver-client-kubelet" signerName). 2. serving certificates for TLS endpoints kube-apiserver can connect to securely (with the "kubernetes.io/kubelet-serving" signerName). This API can be used to request client certificates to authenticate to kube-apiserver (with the "kubernetes.io/kube-apiserver-client" signerName), or to obtain certificates from custom non-Kubernetes signers.

certificatesnetworkingsecurity

A CertificateSigningRequest is an object that represents a request for a certificate to be signed.

Why it matters It allows users to request certificates from the Kubernetes cluster.

Key facts - Represents a request for a certificate - Can be used to request certificates from the cluster

Related CertificateSigningRequestCondition, CertificateSigningRequestList

Sources

swagger.json — “io.k8s.api.certificates.v1.CertificateSigningRequest”

Related (7)

related_to ObjectMeta — references type conf=1

related_to CertificateSigningRequestStatus — references type conf=1

related_to CertificateSigningRequestSpec — references type conf=1

api_for Issue a Certificate for a Kubernetes API Client Using a CertificateSigningRequest — documents API object conf=1

api_for CertificateSigningRequest — documents API object conf=1

api_for AllowInsecureKubeletCertificateSigningRequests — documents API object conf=1

related_to CertificateSigningRequestList — references type conf=1

← all API Explorer