1. Automatically Issuing Ingress Certificates Install cert-manager 1 2 3 4 5 6 7 8 9 10 kubectl apply -f https://raw.githubusercontent.com/jetstack/cert-manager/release-0.10/deploy/manifests/00-crds.yaml kubectl create namespace cert-manager kubectl label namespace cert-manager certmanager.k8s.io/disable-validation=true helm repo add jetstack https://charts.jetstack.io helm repo update helm install \ --name cert-manager \ --namespace cert-manager \ --version v0.10.0 \ jetstack/cert-manager Create a global issuer Create the file issuer.

I am using Kubernetes 1.15.3; the way different versions handle this may vary. 1. About Certificates A root certificate is self-signed A root certificate is issued by itself. Browsers have the CA certificates of common certificate vendors built in. That is why browsers trust the next-level certificates issued by those vendors.

1. SSL Certificates Let’s start with a few concepts. 1.1 Digital Certificates A digital certificate contains the public or private key used for encryption, along with some additional identity information. Anyone can use the relevant tools to generate their own digital certificate, for encrypting files and email, or for securing communications.