I use https://github.com/jetstack/kube-lego https://github.com/jetstack/kube-lego and so far it works . I didn't get the to 90 day expiry yet, but it successful

I use https://github.com/jetstack/kube-lego https://github.com/jetstack/kube-lego and so far it works . I didn't get the to 90 day expiry yet, but it successfully automatically acquired the first certificate. I heard good things from people who have been using it for a while. I recommend the nginx as ingress backend ( https://github.com/jetstack/kube-lego/tree/master/examples/nginx https://github.com/jetstack/kube-lego/tree/master/examples/n... ), as GCE had problems talking over https. Also wait for a bit (e.g. 30 minutes) after updating your domain records and enabling kube-lego (i.e. just before this section: https://github.com/jetstack/kube-lego/tree/master/examples/nginx#enable-kube-lego https://github.com/jetstack/kube-lego/tree/master/examples/n... ).