Kubernetes Integration

Kubernetes Certificate Management with TigerTrust

TigerTrust provides enterprise-grade certificate lifecycle automation for Kubernetes environments. Our native operator integrates seamlessly with your clusters to automate certificate discovery, issuance, and renewal.

TigerTrust Kubernetes Operator

Deploy the TigerTrust operator to automate certificate management:

bash
1# Install TigerTrust operator via Helm
2helm repo add tigertrust https://charts.tigertrust.io
3helm install tigertrust tigertrust/operator \
4  --namespace tigertrust-system \
5  --create-namespace \
6  --set apiKey=$TIGERTRUST_API_KEY

Custom Resource Definitions

Manage certificates declaratively with TigerTrust CRDs:

yaml
1apiVersion: tigertrust.io/v1
2kind: Certificate
3metadata:
4  name: api-gateway-cert
5  namespace: production
6spec:
7  commonName: api.example.com
8  dnsNames:
9    - api.example.com
10    - "*.api.example.com"
11  issuer: enterprise-ca
12  duration: 90d
13  renewBefore: 30d
14  secretName: api-gateway-tls
15  secretTemplate:
16    annotations:
17      reloader.stakater.com/match: "true"

Cert-Manager Integration

TigerTrust works alongside cert-manager:

• Import existing cert-manager certificates into TigerTrust
• Use TigerTrust as an issuer for cert-manager
• Centralized visibility across all certificate sources
• Unified policy enforcement

Ingress Integration

Automatic TLS certificate management for Ingress resources:

yaml
1apiVersion: networking.k8s.io/v1
2kind: Ingress
3metadata:
4  name: my-app
5  annotations:
6    tigertrust.io/issuer: "letsencrypt-prod"
7    tigertrust.io/auto-renew: "true"
8spec:
9  tls:
10    - hosts:
11        - app.example.com
12      secretName: app-tls

Service Mesh mTLS

Manage mTLS certificates for service mesh deployments:

• Istio: Integrate with Istio's certificate management
• Linkerd: Manage Linkerd identity certificates
• Consul Connect: Automate Consul Connect certificates

Multi-Cluster Management

For organizations running multiple Kubernetes clusters:

• Unified certificate inventory across clusters
• Cross-cluster certificate policies
• Federated identity for cluster access
• Centralized compliance monitoring

GitOps Workflow

TigerTrust supports GitOps practices:

yaml
1# ArgoCD Application
2apiVersion: argoproj.io/v1alpha1
3kind: Application
4metadata:
5  name: certificates
6spec:
7  source:
8    repoURL: https://github.com/org/certificates
9    path: production
10  destination:
11    server: https://kubernetes.default.svc
12    namespace: certificates
13  syncPolicy:
14    automated:
15      prune: true
16      selfHeal: true

Certificate Discovery

TigerTrust automatically discovers certificates across your clusters:

• Secrets containing TLS certificates
• Ingress TLS configurations
• Service mesh certificates
• Pod-mounted certificates

Achieve complete certificate lifecycle automation in your Kubernetes environment with TigerTrust.