3 ms·

If you're running microservices, won't you be running them on a platform? If on Kubernetes, just install cert-manager. Or if using FaaS, your platform will alr

• londons_explore 5y ago
  On kubernetes, cert-manager might get certificates for you, but you'll still need to make sure the application correctly reloads those certs (many application frameworks have no way to reload a certificate at runtime).
  • orra 5y ago
    Your reverse proxy can handle the TLS termination. Nginx or Traifik or whatever. Besides, if you're doing microservices, whatever is managing them should be able to restart them gracefully. No need for reload as such.
• simiones 5y ago
  That assumes your application can connect to the internet and can be accessed from the internet. There is a vast array of offline-only kubernetes clusters. You can still of course use self-signed certificates (or setting up your own "CA"), but you'll hit other problems related to runtime certificate reloads and so on. It's still a lot of work to enable SSL for fully offline services.