search

cert-manager / trust-manager

trust-manager is an operator for distributing trust bundles across a Kubernetes cluster.
https://cert-manager.io/docs/projects/trust-manager/
Apache License 2.0
229 stars 63 forks source link

Support RSA Keys #335

Open drewwells opened 3 months ago

drewwells commented 3 months ago

I'm trying to point a bundle at an RSA Private key ie.

-----BEGIN RSA PRIVATE KEY-----
...
-----END RSA PRIVATE KEY-----

Unfortunately, trust-manager only supports der formatted keys and not pem. I thought perhaps I could load my private key into cert-manager since it's more flexible to convert this into a format that trust-manager supports, but external secrets is blocked on evidence https://github.com/cert-manager/cert-manager/issues/2507.

Is there any way to source RSA private/public keys for distributing via trust-manager?

drewwells commented 3 months ago

Log message

 trust/manager/events "msg"="Failed to build bundle sources: invalid PEM data in source: invalid PEM block in bundle; invalid PEM certificate: invalid PEM block in bundle: only CERTIFICATE blocks are permitted but found 'RSA PRIVATE KEY'"
erikgb commented 3 months ago

Why do you want to source a private key?

drewwells commented 3 months ago

I want to publish a public key across all namespaces matching a private key that I provisioned. I can source private or public key