Kubernetes HTTPS with cert-manager and Let's Encrypt

#kubernetes #https

In the video, I cover the entire working of the HTTPS working, from its basics to obtaining certificates from Let's Encrypt. I discuss the complete process, starting with a scenario where there is no HTTPS and then moving on to the steps involved in getting HTTPS certificates. Additionally, I use two examples related to Kubernetes, one involving self-signed certificates and the other illustrating how cert-manager can be used for a more efficient approach.

Timestamps

00:00 Introduction
01:00 How https works with key/lock example
03:20 How does https connection request look like
04:48 What is certificate authority?
05:11 How to use certbot to generate certificate from https
10:48 self signed certificate Demo
16:08 cert-manager and let's encrypt Demo
21:55 Summary

Thank you to all the members for supporting the channel:

►►►Connect with me ►►►

[CosminNicula]

Thank you for sharing this content! Just one remark: at minute 4:50, the client and server are using symmetric key to encrypt and decrypt data. The initial asymmetric encryption is used just for making sure that the symmetric key ends up securely on both the client and the server.

[SpaR]

This is such an amazing explanation of HTTPS.

[GaneshTN]

thank you saiyam pathak of you and you github repo i was able to resolve the ssl issue i was stuck in and was working on it for 2 days thank you so much bro

[yashhirulkar]

Thanks for your efforts..! But what will happen if we dont use cert manager annotation in ingress ?

[dalglishfernandes]

Just to add on if you're using EKS or GKE this cert manager installation can be skilled and use ACM aws tool to get certificate which checks TLS at load balancer level.

[paupaipai]

Thanks so much for this tutorial, I could set up my https flawlessy for two services (a frontend and an API) using the same ingress and the same clusterissuer. However now when I try to call the API from the frontend I get a 308 redirect error, I am wondering if it has to do with the fact that I use a balancer to expose my pods and this is somehow terminating my TLS connection. Would be very nice if you could give guidance in this, since my scenario is very common. Thank you again!

[rohanrustagi]

what key client will encrypt public key or private?

[Hamzakhano]

Brother you havent told anything about the most important thing the Domain name setup how did you got the DNS name ?

[AbhishekTyagi-fl]

is it possible to apply ssl certifiicates on exterenalIP itself. we dont want to use static IP or any DNS. We want to use externalIP generated only

[anushridhote]

do we have to register on acme platform?