cert-manager
cert-manager adds Certificate, Issuer and ClusterIssuer resources to Kubernetes. It asks an authority such as Let's Encrypt for a certificate, stores it in a Secret and renews it before it expires. Ingress controllers such as Traefik and NGINX use that Secret for HTTPS.
Key concepts #
- Issuer: where certificates come from (ACME, CA, Vault).
- Certificate: the request and its Secret.
- Challenge: HTTP-01 or DNS-01 validation.
Learn it #
Install it with Helm and see AWS Certificate Manager for the AWS service.
Related tutorials
Security
HashiCorp Vault
HashiCorp Vault is a secrets manager that stores, generates and encrypts credentials, tokens and keys with fine-grained access control and audit logs.
- Security
Checkov
Checkov is an open source static analysis tool that scans Terraform, Kubernetes and Dockerfile code for security and compliance misconfigurations.
Security
Trivy
Trivy is an open source security scanner that finds vulnerabilities, misconfigurations and secrets in container images, code and infrastructure files.