In a production Environment, how does Kubernetes manage TLS Certificates

Question

I've put in place a master and some slaves, I've also generated some TLS certificates manually, and trusted those certificates all around the system.

Now, I've installed an open source PKI, and I'd like to automatically manage the lifecycle of those certificates, is there an addon that helps in this case ?

score 1 · Answer 1 · answered Jul 25 '19 at 10:08

The most popular way is to use cert-manager + Letsencrypt.

cert-manager is a Kubernetes add-on to automate the management and issuance of TLS certificates from various issuing sources.

It will ensure certificates are valid and up to date periodically, and attempt to renew certificates at an appropriate time before expiry

Other ways can be found in appropriate topics:

https://stackoverflow.com/questions/55358128/cert-manager-duration-and-renewal-process-of-my-certificates

https://stackoverflow.com/questions/54353575/easy-way-to-generate-manage-ssl-certificate-manager-kubernetes

Is there a way to generate certificates offline with the cert-manager ? — TheByeByeMan, Jul 26 '19 at 08:29

In a production Environment, how does Kubernetes manage TLS Certificates

1 Answers1