EJBCA integration with Cert Manager

[hanamantagoud]

Hi,

I went through the list of tutorial videos which explains how to create Root CA , Sub CA , token creation , Certificate Profile and End Entity profile etc.

Then i started following the steps in :
https://docs.keyfactor.com/ejbca/latest/tutorial-use-ejbca-with-cert-manager.
https://github.com/Keyfactor/ejbca-cert-manager-issuer

I see 3 ways of getting TLS certificates from EJBCA CA mentioned in above link.

My question , why manual approval is required using cmctl ?
When certificate expires , for certificate refresh also cmctl approve is required ?

[hanamantagoud]

@primetomas , is there a way to configure auto approval , instead of manual approval ?

[primetomas]

I haven't used cert-manager myself so that it outside of my competence. But automated certificate issuance in kubernetes is what it's all about, no manual steps of course to issue SPIFFE identities.