cert-manager - Past, Present and Future
summary
cert-manager runs as a Kubernetes operator that issues and renews X.509 certificates, claims 15 million image pulls per day, and pledges not to break its V1 CRD API (Sept 2020). It supports ACME/Let’s Encrypt, HashiCorp Vault, Venafi and custom issuers, includes a policy engine to restrict who can request names, can issue hour‑long certificates with private‑key rotation, offers two CSI drivers (private key in memory or spiffe support), exposes Prometheus metrics, uses cosign/sigstore for signed images, and joined the CNCF incubator.
AI-written summary · about
chapters (8)
- 0:00Start
- 1:15The Past: Project History
- 6:25The Present: High-level Overview
- 9:18The Present: Security
- 11:37The Present: Policy
- 16:28The Future: Integrations
- 18:58The Future: Roadmap File
- 19:48The Future: trust-manager
related talks
30mCert-Manager Beyond Ingress – Exploring the Variety of Use Cases
15mCertificates in Kubernetes
38mImplementing Cert-manager in K8s
31mHow We Solved TLS at Scale: Self-Service, Multi-Tenant Cert-manager
10mLightning Talk: Your Wish Is Our Command: Declarative Certificate Management in a...
49mHerding Certs - How to Automate Certificate Management
36mCertifik8s: All You Need to Know About Certificates in Kubernetes
29mKeys, Certs and Vault: From DevSecOps to Post-Quantum