A sidecar utility for managing certificates using a remote cfssl signing server.
Grab the release from github releases, or use the docker release roboll/cfssl-sidecar. The sidecar will generate a key and csr and boot, and will immediately request a signed cert from the specified remote. It will then wake every interval and request a new certificate based on the existing csr.
It accepts the following options:
-certname string
name of resulting cert and key (${certname}.pem, ${certname}-key.pem)
-certpath string
path of resulting cert and key
-csrfile string
path to csr json file
-hostname string
hostname for the cert, comma separated
-interval duration
repeat interval
-label string
signing config label
-perms uint
permissions for resulting dirs/files (default 384)
-profile string
signing config profile
-remote string
remote cfssl server
Example usage as a kubernetes pod sidecar container.