Fredric News

cert-manager ClusterIssuer: ACME HTTP01

💡 cert-manager ClusterIssuer: ACME HTTP01 — Executive Summary

Technical architectural analysis, practical configuration manifests, and deployment instructions for cert-manager ClusterIssuer: ACME HTTP01.

References and Guidelines (NOTE)

– ClusterIssuer is not limited to the Namespace and acts as a certification authority for issuing certificates across the entire cluster.
– Issuer only adds Namespace information.

Self-Sign Issuer

bash

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: selfsigned-issuer
spec:
  selfSigned: {}

CA Issuer

bash

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: ca-issuer
spec:
  ca:
    secretName: ca-key-pair #cert-manager설치 네임스페이스 내

HTTP01

Authentication file in the link http://{your-domain}/.well-known/acme-challenge/

bash

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-prod #운영용 !!! 실제 존재하는 도메인에 대하여 신뢰할수 있는 인증서를 발급받기 위한 Issuer 이므로 주의
spec:
  acme:
    email: #나의 이메일 입력
    privateKeySecretRef:
      name: letsencrypt-prod #생성될 tls.key secret
    server: https://acme-v02.api.letsencrypt.org/directory
    solvers:
    - http01:
        ingress:
          class: #ingressClass 입력
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-staging #테스트및 개발용
spec:
  acme:
    email: #나의 이메일 입력
    privateKeySecretRef:
      name: letsencrypt-staging #생성될 tls.key secret
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    solvers:
    - http01:
        ingress:
          class: #ingressClass 입력

DNS01

bash

apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-prod #운영용 !!! 실제 존재하는 도메인에 대하여 신뢰할수 있는 인증서를 발급받기 위한 Issuer 이므로 주의
spec:
  acme:
    email: #나의 이메일 입력
    privateKeySecretRef:
      name: letsencrypt-prod #생성될 tls.key secret
    server: https://acme-v02.api.letsencrypt.org/directory
    solvers:
    - dns01:
        cloudDNS:
          project: my-project
          serviceAccountSecretRef:
            name: prod-clouddns-svc-acct-secret
            key: service-account.json
---
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-staging #테스트및 개발용
spec:
  acme:
    email: #나의 이메일 입력
    privateKeySecretRef:
      name: letsencrypt-staging #생성될 tls.key secret
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    solvers:
    - dns01:
        cloudDNS:
          project: my-project
          serviceAccountSecretRef:
            name: prod-clouddns-svc-acct-secret
            key: service-account.json

Posted:

2026-11-04

Category: DevOps & AIOps

Author:

fredric

Tags:

CloudNative, Configuration, Containers, DevOps, Engineering, English, Guide, Infrastructure, Kubernetes, Manifest, OpenSource, Orchestration, ServerManagement, SystemOps, TechGuide, Technology, Tutorial, YAML

cert-manager ClusterIssuer: ACME HTTP01

Self-Sign Issuer

CA Issuer

HTTP01

DNS01

Comments

Leave a Reply Cancel reply