3 ms·
A side note, how do you use Kubernetes to set up HTTPS on wildcard DNS? Is there a service for autoconfiguring the DNS and getting the certificate without a for
by crazypython 6y ago
A side note, how do you use Kubernetes to set up HTTPS on wildcard DNS? Is there a service for autoconfiguring the DNS and getting the certificate without a forward proxy?
- qbasic_forever 6y agocert-manager supports the Lets Encrypt DNS challenge, which supports wildcard certs: https://cert-manager.io/docs/ https://cert-manager.io/docs/ It's a little bit of one time setup and then easy-peezy SSL automatically for all your services. Do note that you need a DNS provider with a good API to programmatically control it (the DNS challenge requires setting a special txt record that Lets Encrypt verifies). Read the docs to learn more, but most of the big ones (AWS Route 53, Cloudflare, etc.) should be fine.
- kryptn 6y ago> Is there a service for autoconfiguring the DNS There is! I use external-dns. [1] I haven't actually set up a Let's Encrypt wildcard cert, but I'm pretty certain cert-manager [2] supports it. I don't think you need a proxy if you use the DNS01 challenges. [1] https://github.com/kubernetes-sigs/external-dns/ https://github.com/kubernetes-sigs/external-dns/ [2] https://cert-manager.io/docs/ https://cert-manager.io/docs/