cert-manager
Hard
Integration
Which cert-manager sub-project copies CA bundles into namespaces as ConfigMaps or Secrets, so applications can trust a private CA?
Select your answer:
Show answer and explanation
Answer: trust-manager
Explanation
trust-manager reads CA certificates from the sources listed in a Bundle resource, such as Secrets, ConfigMaps or the default public CA set, and writes the combined bundle to a ConfigMap or Secret in each selected namespace. Pods mount it to trust certificates from your private issuer. cainjector does a related job for webhook and APIService configurations, not for workloads.
More hard cert-manager questions
- Which cert-manager component issues a certificate straight into a pod's volume without creating a Secret?
- What has to happen to a CertificateRequest before an issuer will sign it?
- Which annotation tells cainjector to fill a webhook configuration's caBundle from a cert-manager Certificate?
- cert-manager can't be given API access to the DNS zone for example.com. How can you still use DNS-01 for it?
- Which of the following is a valid way to revoke a certificate in cert-manager?
- Which of the following is a valid way to configure a Vault issuer?