cert-manager
Cloud native X.509 certificate management for Kubernetes and OpenShift
cert-manager is an open-source Kubernetes controller that automates the issuance, renewal, and management of X.509 TLS certificates for Kubernetes and OpenShift workloads. It integrates with multiple certificate authorities including Let's Encrypt, HashiCorp Vault, and private PKI, and stores certificates in Kubernetes Secrets. Donated to the CNCF in 2020, it supports use cases ranging from public-facing Ingress TLS to internal mTLS pod-to-pod communication.
cert-manager runs as a Kubernetes controller that automatically requests certificates from configured issuers and renews them before expiry, storing them as Kubernetes Secrets or injecting them directly via CSI drivers.
Platform engineers and DevOps teams running Kubernetes or OpenShift clusters
Background.
- Status
- launched
- Business model
- open-source
- Launched
- 2020
Similar projects.
Editorial take on the space this project sits in — momentum signals, adjacent moves, our call on whether the wedge is real. Get pinged when we publish a new read or when the landscape shifts.
Have a take on this space?
Tell us what you’d build differently, where you think the incumbents miss, or what we’ve gotten wrong about this project. Comments + reactions are coming soon.