Simplify Lets Encrypt Certificates Management for Kubernetes

Re:Simplify Lets Encrypt Certificates Management for Kubernetes by brudgers on Thursday October 06, 2016 @09:16AM (#12652152)

I'm curious what advantages and tradeoffs it has over the project that it is based upon [1] for a person choosing between them.

[1]: https://github.com/kelseyhightower/kube-cert-manager

[ Parent | on HN ]

Re:Simplify Lets Encrypt Certificates Management for Kubernetes by psg-luna on Thursday October 06, 2016 @09:43AM (#12652344)

Largely, https://github.com/kelseyhightower/kube-cert-manager is incomplete

* it does not support subdomains (only root domains)

* it only supports googlecloud as dns provider

* Bugs and PRs remain unanswered/unmerged

Meanwhile the linked project supports http, SNI and DNS challenges, with around 20 or so DNS providers available. It also supports managing certs for ingress objects directly.

[ Parent | on HN ]

Re:Simplify Lets Encrypt Certificates Management for Kubernetes by thockingoog on Thursday October 06, 2016 @04:10PM (#12655679)

Does it support multiple SANs on a single cert? I want to streamline things like vanity domain redirections, where every domain I add requires me to refresh the cert.

[ Parent | on HN ]

Re:Simplify Lets Encrypt Certificates Management for Kubernetes by psg-luna on Thursday October 06, 2016 @04:35PM (#12655882)

Unfortunately, not currently, no :< It's trivial to get seperate certs, but getting them all on a single cert is not in yet.

[ Parent | on HN ]

Re:Simplify Lets Encrypt Certificates Management for Kubernetes by newman314 on Friday October 07, 2016 @01:50AM (#12658478)

I haven't used this yet but will say that lego (which this uses) is a joy to use.

[ Parent | on HN ]