ADCS Issuer is a Kubernetes cert-manager
CertificateRequest controller
that uses Microsoft Active Directory Certificate Services
to sign certificate requests.
It supports NTLM authentication.
This project is a community maintained fork of the original implementation by Nokia.
TODO: a short summary of installing and configuring the issuer
Detailed documentation can be found in the docs folder or on GitHub Pages.
This project is licensed under the BSD-3-Clause license - see the LICENSE.
This fork has been modified to automatically populate the CA field in the
CertificateRequest status.
Change:
In controllers/adcsrequest_controller.go, the line cr.Status.CA = caCert
has been uncommented.
Rationale:
By default, the standard adcs-issuer does not return the CA certificate in the CertificateRequest status. This prevents cert-manager from automatically including the ca.crt key in the resulting Kubernetes TLS Secret. This modification ensures that the full trust chain (including the CA certificate) is available to client applications directly from the Kubernetes Secret, following standard kubernetes.io/tls conventions.