Skip to content

Commit

Permalink
updated README
Browse files Browse the repository at this point in the history
  • Loading branch information
Nik Ogura committed Apr 30, 2020
1 parent a003e23 commit 89b372d
Showing 1 changed file with 13 additions and 38 deletions.
51 changes: 13 additions & 38 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,46 +4,21 @@ Instrument Hashicorp Vault to create CA's and Certificates for Clients and Servi

Connect to Vault via VAULT_ADDR

Init:

init -> read json
unseal -> read from json

write root token to disk
write unseal keys to disk

create CA's for
* Services
* Clients

Create Service Certs:

Read service list from config file or CLI.

Create Service Certs -> Write to:
* K8S secrets
* PEM Files
Create Client Certs:

Read client list from config file or CLI.
# Commands

Create Client Certs -> Write to:
* K8S Secerts
* PEM FIles
For any command, run `certinator help <command>` for usage instructions.

# Commands
* vault init
* vault unseal
* vault status
* vault init (not yet implemented)
* vault unseal (not yet implemented)
* vault status - returns status information similar to `vault status`

* ca list
* ca create <name>
* ca delete <name>
* ca list - Lists CA's (Certificate Authorities) in Vault
* ca create <name> - Creates a new CA
* ca delete <name> - Deletes a CA

* cert create
* cert list
* cert revoke
* cert create - Creates a single certificate, or multiple certificates via config file.
* cert list - Lists certs the CA has created
* cert revoke - Revokes a certificate by it's CommonName

* crl fetch
* crl rotate
* crl fetch - Fetches the current CRL (Certificate Revocation List) for a CA
* crl rotate - Rotates the CRL (CRL's in Vault are short lived documents by default)

0 comments on commit 89b372d

Please sign in to comment.