cert-manager with self-signed CA

Example usage of cert-manager, which is using self-signed CA for issuing TLS certificates as K8s secrets.

These TLS secrets are then used in Ingresses which are consumed by ingress-nginx.

TOC

• cert-manager with self-signed CA
  • TOC
  • 🏁 Get started
    • 🚀 Create infra
    • Modify /etc/hosts
    • Test certificate
    • 🧹 Destroy infra

🏁 Get started

🚀 Create infra

make tf-apply

Modify /etc/hosts

sudo vim /etc/hosts

# /etc/hosts

- 127.0.0.1 localhost
+ 127.0.0.1 localhost app.jakuboskera.local

Test certificate

openssl s_client \
  -connect app.jakuboskera.local:443 \
  -servername app.jakuboskera.local \
  </dev/null 2>/dev/null \
  | openssl x509 -noout -text \
  | grep DNS: \
  | awk '{$1=$1};1'
open https://app.jakuboskera.local

🧹 Destroy infra

make tf-apply