Let's Encrypt addon

Manage TLS certificates with cert-manager and Let's Encrypt.

Install cert-manager

helm repo add jetstack https://charts.jetstack.io
helm repo update
helm install cert-manager jetstack/cert-manager \
    --namespace cert-manager --create-namespace \
    --set installCRDs=true

ClusterIssuer

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: ops@example.com
    privateKeySecretRef: { name: letsencrypt-account-key }
    solvers:
    - dns01:
        cloudDNS:
          project: <gcp-project>
        # OR azureDNS / route53 / etc.

For wildcard certificates use dns01 (HTTP-01 won't sign wildcards).

Wire to the Dirigible ingress

ingress:
  enabled: true
  host: "*.dirigible.example.com"
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt
  tls:
    enabled: true
    secretName: dirigible-tls

cert-manager will issue, store, and renew the cert.

See also

• GCP DNS Zone
• Azure DNS Zone
• Helm install