Free SSL Certs in Kubernetes! Cert Manager Tutorial

In this Video, I show you how to manage your SSL Certs in Kubernetes with Cert-Manager. We will create free SSL certificates with Letsencrypt and use them in Traefik Ingress Controller. #Kubernetes #Certmanager #Letsencrypt

Follow me:

Timestamps:

00:00 - Introduction
00:38 - Why use Cert-Manager?
02:42 - The Demo Setup
03:04 - Advertisement-*
03:26 - Create a new Kubernetes Cluster
04:29 - Install Cert-Manager
06:06 - Create a ClusterIssuer
10:43 - Create a Certificate
12:50 - Troubleshooting
14:02 - Use our Cert in Traefik Ingress

________________
All links with "*" are affiliate links.

[xbb]

This video is stunning, as are all of your videos. You are actually explaining complicated concepts in simple terms, delivering knowledge to your viewers. Much appreciated!

[christian]

OMG i can't thanking you enough for this video. I have watched it 100 times. Clutch.

[aceisastud]

Nice work man. I appreciate it as I have been overthinking TLS for awhile now and your video helped to simplify it for me.

[ocheejembi]

thanks so much, this really helped me understand cert-manager - especially the DNS01 challenge bit.

[mananalosubo]

Muchas gracias. Estoy aprendiendo kubernetes y cada vez me motiva mas aprenderlo porque me hace las cosas mucho mas faciles que docker y portainer. Ademas de que lo siento más rápido en todos los aspectos.

[dedpossum]

Very useful! I've tinkered around with this quite a bit and honestly the http challenge stuff is quite a pain.

[lakshminarasimmanv]

Thanks for the videos. I’ve learnt a lot from you. Keep continuing uploading videos like this.

[mari__b]

great video! I just setup cert-manager + traefik a few days before and was able to verify my steps in my scripts. so thanks for the "missing piece"!

[lva]

I use cert manager + ingress for a long time, but its the first time that I understand how to troubleshooting it

[randeerlalanga]

Your videos are superb, I learned so much

[esu]

Great tutorial, really nice educational content. I have a question:

I've noticed that you've disabled 'proxy' at 12:30 ; what if you want to keep it (i.e. keeping a secure connection between *both* the user and CF, and CF and the cluster)?
How would you do that?




Thanks for the video! 🤩

[raphaelschmidt]

Hi Christian,
trying to follow your tutorial, but what exactly is "example-issuer-account-key"?

[yahiyaayoub]

I really enjoyed the tutorial and thanks a lot, it answers many questions.

[Spydaw]

Awesome video, very informative thank you.
I screwed up when I was trying to setup Argo on my cluster, I deleted and applied it a good few times and sadly I exceeded the limit on Lets Encrypt, so I am blocked for a week.

[jayglynn]

Hi, do I have to open port 80 on public rule to make the certificaterequest "true" state ?

[UvinduSahan-ny]

when we use this for multiple applications, do I need to create seperate namespace for each certificate ?

[ramprasd]

Hey, First of all, Thanks a lot for the video!
In my case the "Waiting on certificate issuance from order" stays for ever!! Any idea what the issue could be?

[unone]

Would be possible to create a certificate to be used only for a local service ("home lab") but using the cloudflare to answer the dns01 challenge?

[medazizoueslati]

thank you ! the secret and the cert are ready nad i did everything correctly but the aap is not secure and i find Kubernetes Ingress Controller Fake Certificate

[freibuis]

ok, what if you dont know the cluster t12:32 and you want wild card cert?