Deploy EJBCA container in Kubernetes MicroK8s runtime

In this tutorial, you will learn how to deploy an EJBCA PKI container in the Kubernetes distribution MicroK8s.

The video also shows how to use Ingress for external access to EJBCA, deploy Apache HTTPD for containers inside the Kubernetes cluster to access EJBCA, and configure certificates issued from the EJBCA container to terminate TLS for accessing EJBCA.

? *The tutorial covers these steps:*
0:18 Create a namespace and secrets for EJBCA and MariaDB
0:42 Create Load Balancer Ingress Service
1:03 Create a Persistent Volume Claim for the MariaDB container and services for the database and EJBCA
1:31 Create deployment for the MariaDB and EJBCA containers
2:04 Create Ingress for external access to EJBCA
2:58 Issue TLS certificates for EJBCA external and internal access
5:39 Create Kubernetes Secret and ConfigMap for the TLS certificates
7:50 Update EJBCA Ingress configuration to use new TLS certificate
8:30 Deploy Apache HTTPD for internal Kubernetes cluster access

? *Prerequisites*
Before you begin you will need:
- A running EJBCA instance with a PKI hierarchy, TLS server and client certificates, and roles set up.
- An installed MicroK8s runtime.
See previous videos in this playlist: https://www.youtube.com/playlist?list=PLt17f5skfOPEcg-Hbn4d-YY22wdmnaEa9
- To be familiar with the YAML format and how to use the Kubernetes command-line tool kubectl. See https://kubernetes.io/docs/reference/kubectl/kubectl/.

*Download*
- EJBCA on Docker Hub: https://hub.docker.com/r/keyfactor/ejbca-ce

*Documentation*
- Full tutorial: https://doc.primekey.com/ejbca/tutorials-and-guides/tutorial-deploy-ejbca-container-in-microk8s

ℹ️ *About the Keyfactor Community*
As a pioneer in open-source cryptography, PKI, and signing, Keyfactor offers Bouncy Castle cryptographic APIs, the open-source certificate authority software EJBCA Community, and the open-source signing software SignServer Community. Join the Keyfactor Community, a hub for engineers, developers, and security experts seeking relevant solutions for cryptography, certificates, PKI, and signing while prototyping or testing their products and applications. The Keyfactor Community is a part of Keyfactor. Read more on https://www.keyfactor.com/open-source/community/.

? *For more information:*
- Visit the website: http://www.ejbca.org/
- Sign up for our newsletter: https://www.ejbca.org/#popup-newsletter
- Follow us on X (Twitter): https://twitter.com/KeyfactorComm