cert-manager
Hard
Integration
How do you get cert-manager to create and manage a Certificate for an Ingress automatically?
Select your answer:
Show answer and explanation
Answer: Add a cert-manager.io/cluster-issuer annotation and a tls section
Explanation
cert-manager's ingress-shim watches Ingresses with those annotations. For each tls entry it creates a Certificate for the listed hosts, stored in the secretName that the Ingress controller already reads, and it keeps the Certificate in sync when you edit the Ingress. Gateway API Gateways work the same way when that support is enabled.
More hard cert-manager questions
- What does privateKey.rotationPolicy: Always do on a Certificate?
- How do you make cert-manager reissue a certificate right away, before it is due for renewal?
- What does the Secret named in an ACME issuer's privateKeySecretRef contain?
- Let's Encrypt fails HTTP-01 validation for app.example.com. Which URL must be reachable from the internet?
- A Certificate fails to issue several times in a row, for example because the issuer is misconfigured. How does cert-manager retry?
- Which cert-manager sub-project copies CA bundles into namespaces as ConfigMaps or Secrets, so applications can trust a private CA?