Kubernetes Integration

Kubernetes Certificate Management with TigerTrust

TigerTrust provides enterprise-grade certificate lifecycle automation for Kubernetes environments. Our native operator integrates seamlessly with your clusters to automate certificate discovery, issuance, and renewal.

TigerTrust Kubernetes Operator

Deploy the TigerTrust operator to automate certificate management:

# Install TigerTrust operator via Helm
helm repo add tigertrust https://charts.tigertrust.io
helm install tigertrust tigertrust/operator \
  --namespace tigertrust-system \
  --create-namespace \
  --set apiKey=$TIGERTRUST_API_KEY

Custom Resource Definitions

Manage certificates declaratively with TigerTrust CRDs:

apiVersion: tigertrust.io/v1
kind: Certificate
metadata:
  name: api-gateway-cert
  namespace: production
spec:
  commonName: api.example.com
  dnsNames:
    - api.example.com
    - "*.api.example.com"
  issuer: enterprise-ca
  duration: 90d
  renewBefore: 30d
  secretName: api-gateway-tls
  secretTemplate:
    annotations:
      reloader.stakater.com/match: "true"

Cert-Manager Integration

TigerTrust works alongside cert-manager:

• Import existing cert-manager certificates into TigerTrust
• Use TigerTrust as an issuer for cert-manager
• Centralized visibility across all certificate sources
• Unified policy enforcement

Ingress Integration

Automatic TLS certificate management for Ingress resources:

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: my-app
  annotations:
    tigertrust.io/issuer: "letsencrypt-prod"
    tigertrust.io/auto-renew: "true"
spec:
  tls:
    - hosts:
        - app.example.com
      secretName: app-tls

Service Mesh mTLS

Manage mTLS certificates for service mesh deployments:

• Istio: Integrate with Istio's certificate management
• Linkerd: Manage Linkerd identity certificates
• Consul Connect: Automate Consul Connect certificates

Multi-Cluster Management

For organizations running multiple Kubernetes clusters:

• Unified certificate inventory across clusters
• Cross-cluster certificate policies
• Federated identity for cluster access
• Centralized compliance monitoring

GitOps Workflow

TigerTrust supports GitOps practices:

# ArgoCD Application
apiVersion: argoproj.io/v1alpha1
kind: Application
metadata:
  name: certificates
spec:
  source:
    repoURL: https://github.com/org/certificates
    path: production
  destination:
    server: https://kubernetes.default.svc
    namespace: certificates
  syncPolicy:
    automated:
      prune: true
      selfHeal: true

Certificate Discovery

TigerTrust automatically discovers certificates across your clusters:

• Secrets containing TLS certificates
• Ingress TLS configurations
• Service mesh certificates
• Pod-mounted certificates

Achieve complete certificate lifecycle automation in your Kubernetes environment with TigerTrust.