From 6ab11ca91c04fc318cd897cb766f781400e8df79 Mon Sep 17 00:00:00 2001 From: Jerome Petazzoni Date: Fri, 9 Apr 2021 15:48:10 +0200 Subject: [PATCH] =?UTF-8?q?=F0=9F=94=90=20Add=20cert-manager=20+=20Ingress?= =?UTF-8?q?=20annotation=20information?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- slides/k8s/cert-manager.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/slides/k8s/cert-manager.md b/slides/k8s/cert-manager.md index b95949b3..61c65b10 100644 --- a/slides/k8s/cert-manager.md +++ b/slides/k8s/cert-manager.md @@ -223,6 +223,24 @@ spec: class: extra-details +## Automatic TLS Ingress with annotations + +- It is also possible to annotate Ingress resources for cert-manager + +- If we annotate an Ingress resource with `cert-manager.io/cluster-issuer=xxx`: + + - cert-manager will detect that annotation + + - it will obtain a certificate using the specified ClusterIssuer (`xxx`) + + - it will store the key and certificate in the specified Secret + +- Note: the Ingress still needs the `tls` section with `secretName` and `hosts` + +--- + +class: extra-details + ## Let's Encrypt and nip.io - Let's Encrypt has [rate limits](https://letsencrypt.org/docs/rate-limits/) per domain