Fundament Marketplace
Marketplace

cert-manager

Automatic TLS certificate management

By System · 1.21.3-master.3794

About

Overview

cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates.

Installed versions

  • cert-manager v1.21.3

Key Features

  • Automated Issuance: Automatically provision TLS certificates from various issuers
  • Multiple Issuers: Support for Let's Encrypt, HashiCorp Vault, Venafi, and more
  • Auto-Renewal: Certificates are automatically renewed before expiry
  • Ingress Integration: Native integration with Kubernetes Ingress resources

Use Cases

  • Automatic HTTPS for web applications
  • Securing internal service-to-service communication
  • Managing certificates for ingress controllers

Permissions

Once installed, cert-manager is granted the following access to your cluster.

Can view and change 18

  • Certificate requestscertificaterequests
  • Certificatescertificates
  • Cluster issuersclusterissuers
  • Cluster role bindingsclusterrolebindings

    Who is granted a cluster role.

  • Cluster rolesclusterroles

    Sets of permissions across the cluster.

  • Config mapsconfigmaps

    Non-secret configuration data.

  • Custom resource definitionscustomresourcedefinitions

    New kinds of resources added to the cluster.

  • Deploymentsdeployments

    Workloads and how they are rolled out.

  • Issuersissuers
  • Jobsjobs

    One-off tasks.

  • Mutating webhooksmutatingwebhookconfigurations

    Hooks that can alter changes made to the cluster.

  • Namespacesnamespaces

    The spaces workloads are grouped in.

  • Role bindingsrolebindings

    Who is granted a role within a namespace.

  • Rolesroles

    Sets of permissions within a namespace.

  • Secretssecrets

    Passwords, keys and certificates stored in the cluster.

  • Service accountsserviceaccounts

    Identities that workloads use to talk to the cluster.

  • Servicesservices

    Network endpoints for workloads.

  • Validating webhooksvalidatingwebhookconfigurations

    Checks that can reject changes made to the cluster.

Can view 4

  • Challengeschallenges
  • Ordersorders
  • Podspods

    Running containers.

  • Replica setsreplicasets

    The pod copies behind a deployment.