HTTPS/TLS enablement
Certificate renewal automation
Multi-domain certificate management
Wildcard certificate handling
Certificate monitoring and alerts
Zero-downtime certificate rotation
Internal PKI management

Quick Start

Minimal working example:

# cert-manager-setup.yaml
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-prod
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: admin@myapp.com
    privateKeySecretRef:
      name: letsencrypt-prod
    solvers:
      # HTTP-01 solver for standard domains
      - http01:
          ingress:
            class: nginx
        selector:
          dnsNames:
            - "myapp.com"
            - "www.myapp.com"

      # DNS-01 solver for wildcard domains
      - dns01:
          route53:
            region: us-east-1
// ... (see reference guides for full implementation)

Reference Guides

Detailed implementations in the references/ directory:

Guide	Contents
Let's Encrypt with Cert-Manager	Let's Encrypt with Cert-Manager
AWS ACM Certificate Management	AWS ACM Certificate Management
Certificate Monitoring and Renewal	Certificate Monitoring and Renewal
Automated Certificate Renewal	Automated Certificate Renewal
Certificate Pinning	Certificate Pinning

Best Practices

✅ DO

Automate certificate renewal
Use Let's Encrypt for public certs
Monitor certificate expiration
Use wildcard certs strategically
Implement certificate pinning
Rotate certificates regularly
Store keys securely
Use strong key sizes (2048+ RSA, 256+ ECDSA)

❌ DON'T

Manual certificate management
Self-signed certs in production
Share private keys
Ignore expiration warnings
Use weak key sizes
Mix dev and prod certs
Commit certs to git
Disable certificate validation

ssl-certificate-management

SSL Certificate Management

Table of Contents

Overview

When to Use