podcertcontroller

Overview ¶

Command podcertcontroller is a pod certificate controller that implements two signers.

• servicedns.ate.dev/identity: Issues certificate for Kubernetes service DNS names, backed by a local CA.
• podid.ate.dev/identity: Issues certificates equivalent to KSA tokens, backed by a local CA.

These signers are not unique to Agent Substrate, and will eventually be replaced by signers that are being developed as part of upstream Kubernetes.