Live data from Hacker News

Simplify Lets Encrypt Certificates Management for Kubernetes

github.com

11–18 of 18 posts

Re: Simplify Lets Encrypt Certificates Management for Kubernetes

#11

I thought I wanted this for a long time, but `kube-lego` gets me very similar results... without needing to inject credentials for my DNS provider to my cluster. I'm curious if others have thoughts on this vs kube-lego. (I would agree that I like the approach of this project quite a bit more than kelseyhightower's. This feels more complete, works with far more providers, etc)

You can use http challenges with kcm as well. Which is what ensures you don't need to inject dns credentials.

Re: Simplify Lets Encrypt Certificates Management for Kubernetes

#12

I thought I wanted this for a long time, but `kube-lego` gets me very similar results... without needing to inject credentials for my DNS provider to my cluster. I'm curious if others have thoughts on this vs kube-lego. (I would agree that I like the approach of this project quite a bit more than kelseyhightower's. This feels more complete, works with far more providers, etc)

You can use http challenges with kcm as well. Which is what ensures you don't need to inject dns credentials.

Whoa! This is really great! Thank you for this (and to think I was excited to see the Caddy secret backend, this is way better IMO)!

edit: Oh my, and I can use this for the HTTP challenge and still use it with other Ingress controllers. I'd love to buy you a beer/rootbeer or something, I'm so tickled to have this!

Re: Simplify Lets Encrypt Certificates Management for Kubernetes

#13
post #9

Found this similar project a couple days ago: https://github.com/tazjin/kubernetes-letsencrypt Doesn't seem quite as configurable but looks a bit simpler to implement.

Please file an issue if you're missing some configuration option! I explicitly don't intend to support other challenge mechanisms than DNS though.

Re: Simplify Lets Encrypt Certificates Management for Kubernetes

#14

Earlier quoted context omitted.

You can use http challenges with kcm as well. Which is what ensures you don't need to inject dns credentials.

Whoa! This is really great! Thank you for this (and to think I was excited to see the Caddy secret backend, this is way better IMO)! edit: Oh my, and I can use this for the HTTP challenge and still use it with other Ingress controllers. I'd love to buy you a beer/rootbeer or something, I'm so tickled to have this!

If you're ever in stockholm, prod me on twitter and we can have a rootbeer :)
Post reply on HN