• @hemko@lemmy.dbzer0.com
    link
    fedilink
    English
    7
    edit-2
    11 hours ago

    Technically, you shouldn’t even deploy certs to network appliances or servers but they should fetch certificates automatically from a vault. I know there’s minimal support for such things right now from some vendors, but that should be fixed by those vendors.

    Even Microsoft supports such solutions in Azure both with PaaS components and Windows and Linux servers (in Azure or onprem) via extensions

    • Justin
      link
      fedilink
      English
      3
      edit-2
      11 hours ago

      True.

      cert-manager is an amazing tool for deploying certificates for containerized applications. There’s no standardized way to deploy those certs outside of containers without scripting it yourself though, unfortunately.