CERT-MANAGER

The K8s controller automating Let's Encrypt and internal certificates.

Definition

cert-manager defines ClusterIssuer (global CA), Issuer (per-namespace CA), Certificate (cert request). Supports ACME (HTTP-01, DNS-01), HashiCorp Vault PKI, AWS PCA, Venafi. Critical for PEPPOL AS4 access points needing always-valid certificates.

Origin

Created by Jetstack (acquired by Venafi in 2020). Maintained by CNCF since 2020 (graduated 2024).

Example in context

A Certificate request for as4.example.com automatically renewed at D-30 via DNS-01 Let's Encrypt.

Related terms

• Kubernetes — target platform.
• X.509 — certificate format.