[Hands-on] Kubernetes Pod Certificate Request introduced in v1.35

Goal [!NOTE] In hurry? Jump to the result! The goal of this document is to generate auto signed certificate for any pod with the following projected volumes: volumes: - name: creds projected: sources: - podCertificate: signerName: row-major.net/spiffe keyType: ED25519 credentialBundlePath: service.crt keyPath: service.key - clusterTrustBundle: name: row-major.net:spiffe:primary-bundle path: ca.crt Table of Contents cover_image: ./thumbnail.png Goal Table of Contents Walkthrough Setup: Working Directory Setup: Kind Cluster with Cert Provisioning Enabled Setup: Mash Controller Deployed Verify: Auto Distributed Certificate Feature on Sample Deployment What's next? Closing Walkthrough Here is the step-by-step record of how I achieved the goal. Setup: Working Directory Let's quickly create a test directory build: test_name=pod_certificate_request tmp_dir=$(date +%y%m%d_%H%M%S_$test_name) mkdir -p ~/test_dive/$tmp_dir cd ~/test_dive/$tmp_dir Setup: Kind Cluster with Cert Provisioning Enabled