项目¶

cert-manager 项目有许多卫星项目，它们扩展了项目的功能，并补充了核心的 cert-manager 特性集。

这些工具有助于安全性、遵从性和控制。

• istio-csr: Secure Istio service mesh with istio-csr which is an agent that allows for Istio workload and control plane components to be secured using cert-manager.
• approver-policy: a cert-manager approver that will automatically approve or deny certificate requests based on defined policy.
• csi-driver: a Container Storage Interface (CSI) driver plugin for Kubernetes to work along cert-manager. The goal for this plugin is to seamlessly request and mount certificate key pairs to pods. This is useful for facilitating mTLS, or otherwise securing connections of pods with guaranteed present certificates whilst having all of the features that cert-manager provides.
• csi-driver-spiffe: another CSI driver plugin to work along cert-manager. This CSI driver transparently delivers SPIFFE SVIDs in the form of X.509 certificate key pairs to mounting Kubernetes Pods. The end result is all and any Pod running in Kubernetes can securely request their SPIFFE identity document from a Trust Domain with minimal configuration.
• trust-manager: 在 Kubernetes 集群中分发信任包(如 CA 证书)的操作符。