Pods & Pixels

Pods & Pixels

CertificateSigningRequest (CSR) in Kubernetes

Christopher Adamson's avatar
Christopher Adamson
Sep 07, 2025
∙ Paid
Share

Kubernetes’ CertificateSigningRequest (CSR) resource, introduced as stable in v1.19, provides a programmable interface for requesting and obtaining X.509 certificates signed by a specified signer. CSRs are fundamental to automating TLS credential provisioning within clusters, underpinning use cases such as kubelet certificate rotation, webhook certificates, and user authentication via client certificates.

Keep reading with a 7-day free trial

Subscribe to Pods & Pixels to keep reading this post and get 7 days of free access to the full post archives.

Already a paid subscriber? Sign in
© 2025 Christopher Adamson
Privacy ∙ Terms ∙ Collection notice
Start writingGet the app
Substack is the home for great culture