Skip to main content

Automatic SSL Certificates

Automated SSL Certificate provisioning is a service of nine Managed GKE that allows you to automate the lifecycle of Let's Encrypt certificates for ingress.

Details​

For customers who need to have https ingress our cert-manager service provides an open source solution for provisioning and managing TLS certificates in Kubernetes clusters.

Availability​

cert-manager is available as standard with nine Managed GKE.

Usage​

To use cert-manager on your ingress object you simply need to add an annotation for the cluster issuer and a TLS block to indicate that a certificate should be created and stored in a secret:

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  annotations:
    # add an annotation indicating the issuer to use.
    cert-manager.io/cluster-issuer: <nameOfClusterIssuer>
  name: myIngress
  namespace: myIngress
spec:
  # this is optional since the nginx class is the default
  ingressClassName: nginx
  rules:
    - host: myingress.com
      http:
        paths:
          - path: /
            backend:
              service:
                name: myservice
                port:
                  number: 80
  tls: # < placing a host in the TLS config will indicate a cert should be created
    - hosts:
        - myingress.com
      secretName: myingress-cert # < cert-manager will store the created certificate in this secret.

for the cert-manager.io/cluster-issuer value you may choose between letsencrypt-prod and letsencrypt-staging. For information about the difference between these please see the letsencrypt documentation.