Feature Overview

Certificate Management was and stays an important topic especially with HyperShift's externalized control-plane model. In a typical OpenShift / Kubernetes clusters, certificates can serve two purposes:

• Kubernetes components
• Workloads

With HyperShift's architecture, the components that manage/rotate certificates are likely going to be different.t

Goal(s)

• Define a method for certificate management both for control-plane and workloads.
• Identify how and what certificates need rotations?
• Understand the implications on the HyperShift API.

Note: Sync with the API-server team is likely needed.

References

https://docs.google.com/document/d/1iEs6qGmi68NP5OqMkaSeZmN5CIXmHDt2ltQ1yIko7q4/edit