cert-manager
Automated TLS certificate management for Kubernetes
cert-manager is an open-source CNCF project that automates the issuance and renewal of TLS certificates in Kubernetes. It integrates with Let's Encrypt and other issuers for self-hosted clusters.
Key features
- Automatic certificate renewal
- ACME and CA issuers
- Kubernetes native
- DNS and HTTP challenges
Pros & cons
Strengths
- Hands-off certificate renewal
- CNCF graduated project
- Many issuer integrations
Trade-offs
- Kubernetes only
- Debugging issuance can be tricky
cert-manager replaces
Compare cert-manager
2 head-to-head comparisons.
Similar reverse proxy & gateways apps
Caddy
Reverse Proxy & GatewaysFast, multi-platform web server with automatic HTTPS
Replaces Nginx, Apache
Traefik
Reverse Proxy & GatewaysCloud-native reverse proxy and load balancer
Replaces HAProxy, AWS ELB
Pi-hole
Reverse Proxy & GatewaysBlackhole for Internet advertisements with a GUI for management
Replaces NextDNS
acme.sh
Reverse Proxy & GatewaysPure shell ACME client for TLS certificates
Replaces Certbot
mitmproxy
Reverse Proxy & GatewaysInteractive HTTPS proxy for inspection and debugging
Replaces Charles Proxy, Fiddler
Kong Gateway
Reverse Proxy & GatewaysCloud-native, fast, scalable API gateway
Replaces AWS API Gateway, Apigee