Posted inSecurity
Cert-Manager on Kubernetes: Automate TLS Provisioning and Renewal with Let’s Encrypt — Never Worry About Expired Certificates Again
cert-manager runs inside your Kubernetes cluster and fully automates the entire certificate lifecycle — from initial provisioning to renewal — without any manual intervention. It supports both HTTP-01 and DNS-01 challenges, making it suitable for public Ingresses and internal services that aren't exposed to the internet. This guide walks through installation, ClusterIssuer configuration, wildcard cert setup with Cloudflare DNS, and practical tips from real production experience.