Cert Manager

StarlingX integrates the open source project cert-manager.

Cert-manager is a native Kubernetes certificate management controller, that supports certificate management with external certificate authorities (CAs). nginx-ingress-controller is also integrated with StarlingX in support of http-01 challenges from CAs as part of cert-manager certificate requests.

For more information about Cert Manager, see cert-manager.io.

Prerequisites for using Cert Manager

  • Ensure that your StarlingX administrator has shared the local registry’s public repository’s credentials/secret with the namespace where you will create certificates,. This will allow you to leverage the registry.local:9001/public/cert-manager-acmesolver image.

  • Ensure that your StarlingX administrator has enabled use of the cert-manager apiGroups in your RBAC policies.

Resources on Creating Issuers and Certificates