CertManager
About
Cert-Manager is used by APL to automatically create and rotate wildcard TLS certificates for service endpoints. You may bring your own CA, or let APL create one for you. If you bring your own trusted wildcard certificate, then cert-manager will not manage this certificate.
The wildcard certificate must be valid for the following domain *.<cluster.domainSuffix>, where the value of <cluster.domainSuffix> comes from the cluster.yaml file.
Setting Cert-Manager to use Letsencrypt requires DNS availability of the requesting domains, and forces Otomi to install ExternalDNS. Because a lot of DNS settings are used by other APL contexts, all DNS configuration can be found here. ::: |