Cloud Intermediate
cert-manager — Automatic TLS Certificates¶
cert-managerTLSLet’s Encrypt 3 min read
Automatic Let’s Encrypt certificates in Kubernetes with cert-manager.
Installation and ClusterIssuer¶
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
email: [email protected]
privateKeySecretRef:
name: letsencrypt-key
solvers:
- http01:
ingress:
class: nginx
Usage with Ingress¶
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
annotations:
cert-manager.io/cluster-issuer: letsencrypt
spec:
tls:
- hosts: [app.example.com]
secretName: app-tls
rules:
- host: app.example.com
http:
paths:
- path: /
pathType: Prefix
backend:
service: {name: app, port: {number: 80}}
Summary¶
cert-manager = set and forget TLS. Automatic issuance and renewal of Let’s Encrypt certificates.
Need Help with Implementation?¶
Our team has experience designing and implementing modern architectures. We’re happy to help.