RWS/bootstrap
9
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
FLOW bootstrap chart
8 commits 1 branch 0 tags 48 KiB
Find a file
Exact
Peeters, Jeroen (RWS CIV) 90d8a7ac9b add new Rijkswaterstaat-Infra-Services-Issuing-CA to PKI chain
2026-09-25 11:46:12 +02:00
chart add new Rijkswaterstaat-Infra-Services-Issuing-CA to PKI chain 2026-09-25 11:46:12 +02:00
.gitlab-ci.yml Deploy the bootstrap chart 2026-05-18 10:43:41 +02:00
helmfile.yaml Deploy the bootstrap chart 2026-05-18 10:43:41 +02:00
README.md add new Rijkswaterstaat-Infra-Services-Issuing-CA to PKI chain 2026-09-25 11:46:12 +02:00
renovate.json Configure Renovate 2026-05-26 08:59:24 +02:00
secrets.sops.yaml Deploy the bootstrap chart 2026-05-18 10:43:41 +02:00

README.md

FLOW bootstrap

This is the FLOW cluster bootstrapping chart.

It creates:

  • The secret containing the Vault AppRole secret ID. It is used by the Platform ClusterSecretStore. This secret store provides the credentials for all other secret stores
  • The config map containing the entire RWS PKI trust chain. It is later used by TrustManager to create a RWS PKI trust bundle and distribute it to all namespaces.

RWS PKI Chain

It contains the following certificates:

Certificate 1
subject=DC = nl, DC = rws, DC = ad, CN = Rijkswaterstaat-General-Services-Issuing-CA
issuer=C = NL, O = Rijkswaterstaat, CN = Rijkswaterstaat-Internal-Root-CA
SHA1 Fingerprint=AA:05:96:93:D4:B5:FE:B6:05:F4:CC:D2:9D:C8:67:D5:7F:33:EB:44
serial=14
notBefore=Sep 23 00:00:00 2025 GMT
notAfter=Sep 22 23:59:59 2035 GMT
----------------------------------------
Certificate 2
subject=DC = nl, DC = rws, DC = ad, CN = Rijkswaterstaat-General-Services-Issuing-CA
issuer=C = NL, O = Rijkswaterstaat, CN = Rijkswaterstaat-Internal-Root-CA
SHA1 Fingerprint=A5:A6:12:23:F9:D3:58:E5:A8:63:EF:3A:A3:2B:16:8B:33:99:71:8C
serial=05
notBefore=Jan 30 00:00:00 2018 GMT
notAfter=Jan 29 23:59:59 2028 GMT
----------------------------------------
Certificate 3
subject=DC = local, DC = dcm, CN = Rijkswaterstaat-Datacenter-Services-Issuing-CA
issuer=C = NL, O = Rijkswaterstaat, CN = Rijkswaterstaat-Internal-Root-CA
SHA1 Fingerprint=13:E4:99:BA:1D:33:80:FA:9A:41:37:5B:DD:2A:EC:68:D5:DF:DC:15
serial=02
notBefore=Jan  2 00:00:00 2018 GMT
notAfter=Jan  1 23:59:59 2028 GMT
----------------------------------------
Certificate 4
subject=C = NL, O = Rijkswaterstaat, CN = Rijkswaterstaat-Internal-Root-CA
issuer=C = NL, O = Rijkswaterstaat, CN = Rijkswaterstaat-Internal-Root-CA
SHA1 Fingerprint=5D:3D:6A:55:E2:88:4A:3F:AC:19:E5:E0:FD:40:00:37:01:FE:B0:90
serial=01
notBefore=Jan  2 00:00:00 2018 GMT
notAfter=Jan  1 23:59:59 2038 GMT
----------------------------------------
Certificate 5
subject=C = NL, L = Delft, O = Rijkswaterstaat, CN = Rijkswaterstaat-Infra-Services-Issuing-CA
issuer=C = NL, O = Rijkswaterstaat, CN = Rijkswaterstaat-Internal-Root-CA
SHA1 Fingerprint=F9:3E:85:CE:7C:24:BB:73:9D:D8:DE:FC:93:FD:D5:D3:F8:1A:AF:B4
serial=15
notBefore=Jan 12 11:36:42 2026 GMT
notAfter=Jan 12 11:36:42 2036 GMT
----------------------------------------