libvirt-tls-sidecar

This is a tool which is built on top of the pod-tls-sidecar framework however it has extra tooling which will make sure to reload the TLS certificates in the libvirt daemon when they are updated.

This project uses Tilt for development. To start the development environment run:

tilt up

In order to trigger a manual renewal, you can try something like this:

cmctl renew libvirt-api
cmctl renew libvirt-vnc

You can then view the logs after:

kubectl -n default logs ds/libvirt-libvirt-default -c tls-sidecar