Cert Manager (Cert Manager) creates TLS certificates for workloads in Kubernetes and renews them before they expire.

Cert Manager can obtain certificates from various certificate authorities, including: Let’s Encrypt, HashiCorp Vault, Venafi, and private PKI.

When installing the extension, enabling the parameters under the defaultIssuer field in the extension configuration will generate a ClusterIssuer named default-issuer. The default ClusterIssuer can be used to issue certificates for other extensions. For example, when using the KubeSphere Gateway, it can automatically generate and update certificates for Ingresses.

Note

For more information about component configuration, please refer to the description on the details page of the "Cert Manager" extension in the Extensions Center.