Tested with minikube version: v1.13.0
Using the CA of the cluster we, as admins, can create certificate requests, keys and certs for the developers who want to use the cluster, the name of the csr must be the user and the organization must be the group that you want to have access to. The Go program creates PKI CSR's, it talks with your k8s API, wait's for them to be approved, creates the client.key and the cert.key, and it sends them to the smtp server.
- Start minikube
minikube start
- Start a fake smtp server with
fake-smtp-server
from An awesome npm package - Do a
go run main.go
and wait until it finishes - Apply the roles with
kubectl apply -f roles.yaml
- Download the kubeconfigs from the browser in
localhost:1025
- Run
export KUBECONFIG=~/Downloads/x.kubeconfig
- Test it!