Skip to content

docs(workloads): add documentation for service serving certificates#582

Open
tossmilestone wants to merge 1 commit intomasterfrom
feat/service-cert
Open

docs(workloads): add documentation for service serving certificates#582
tossmilestone wants to merge 1 commit intomasterfrom
feat/service-cert

Conversation

@tossmilestone
Copy link
Member

@tossmilestone tossmilestone commented Mar 3, 2026

Summary by CodeRabbit

  • Documentation
    • Added a comprehensive guide for Service Serving Certificate: automated TLS issuance and synchronization for Services, zero-touch provisioning, cross-namespace CA sync, automated lifecycle via cert-manager and centralized ClusterIssuer.
    • Includes administrator configuration steps for policy and RBAC setup, developer workflow to request certificates via Service annotations, verification steps, and examples showing how to mount generated certificates into Pods.

@coderabbitai
Copy link
Contributor

coderabbitai bot commented Mar 3, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 0ec757a and f9e5b4f.

📒 Files selected for processing (1)
  • docs/en/developer/building_application/application_workloads/service_certificate.mdx

Walkthrough

Adds a new documentation page that describes an automated TLS certificate issuance and synchronization workflow for Kubernetes Services, including Kyverno policies, RBAC configuration, developer annotations, secret verification, and Deployment mounting examples. (50 words)

Changes

Cohort / File(s) Summary
Service Certificate Documentation
docs/en/developer/building_application/application_workloads/service_certificate.mdx
Adds a 296-line documentation page describing service serving certificate workflow: zero-touch provisioning, cross-namespace CA sync, cert-manager lifecycle, Kyverno ClusterPolicies (clone-ca-secret, sync-ca-rotation, generate-service-cert), RBAC ClusterRole manifests, Service annotation usage, secret verification, and Deployment mounting examples.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 A doc so shiny, fresh and new,
Service certs wrapped in TLS true,
Kyverno hums and secrets glide,
Developers annotate with pride,
Zero-touch blooms — secure and spry.

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately and specifically describes the main change: adding documentation for service serving certificates in the workloads section.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch feat/service-cert

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Contributor

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In
`@docs/en/developer/building_application/application_workloads/service_certificate.mdx`:
- Around line 1-7: The file service_certificate.mdx must be renamed to use
kebab-case: change the filename to service-certificate.mdx and update any
references or imports to this document (links in docs, sidebars, navigation
entries) so they point to service-certificate.mdx; ensure the frontmatter/title
remains unchanged and that any tooling/config that expects the new name is
updated accordingly.

ℹ️ Review info

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 52d9507 and 0ec757a.

📒 Files selected for processing (1)
  • docs/en/developer/building_application/application_workloads/service_certificate.mdx

@cloudflare-workers-and-pages
Copy link

Deploying alauda-container-platform with  Cloudflare Pages  Cloudflare Pages

Latest commit: 0ec757a
Status: ✅  Deploy successful!
Preview URL: https://273c3fed.alauda-container-platform.pages.dev
Branch Preview URL: https://feat-service-cert.alauda-container-platform.pages.dev

View logs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant