create-and-manage-cert.MD

access granting proces

1. create user cert openssl genrsa -out amit.key 2048
2. create CSR openssl req -new -key amit.key -subj "/CN=jane" -out amit.csr
3. encode CSR cat amit.csr |base64

# amit.yaml
apiVersion: certificates.k8s.io/v1beta1
kind: CertificateSigningRequest
metadata:
  name: amit
spec:
  groups:
  - system:authenticated
  usages:
  - digital signature
  - key encipherment
  - server auth
  request:
    <certificate-goes-here>

4. kubectl create -f amit.yaml
5. list the csr kubectl get csr
6. Approve the request kubectl certificate approve amit
7. View the certificate kubectl get csr amit -o yaml
8. Decode it echo "<certificate>" | base64 --decode