Kubernetes Cert Manager for Letsencrypt Based Certificates With Nginx Ingress
Cert Manager cert manager stores certificates in kubernetes secret store and we can configure the nginx-ingress to use these certificates.
cert-manager.yaml wget https://github.com/jetstack/cert-manager/releases/download/v0.15.1/cert-manager.yaml kubectl apply --validate=false -f cert-manager.yaml cert-manager.crds.yaml wget https://github.com/jetstack/cert-manager/releases/download/v0.15.1/cert-manager.crds.yaml kubectl apply --validate=false -f cert-manager.crds.yaml using the ClusterIssuer allows us to create certificates across all namespaces
letsencrypt-issuer.yaml apiVersion: cert-manager.io/v1alpha2 kind: ClusterIssuer metadata: name: letsencrypt-prod spec: acme: # The ACME server URL server: https://acme-v02.api.letsencrypt.org/directory # Email address used for ACME registration email: loeken@internetz.