cert-manager

cert-manager runs in your cluster and issues and renews TLS certificates as Kubernetes resources. Edka uses it for the public and wildcard certificate flows behind your domains.

1. Issues and renews certificates from Let’s Encrypt
2. Supports multiple issuer types: ACME, self-signed, and CA
3. Manages certificates through Kubernetes-native resources
4. Attaches certificates to Gateway API and ingress controllers automatically

Features available

Edka drives two issuance paths through cert-manager. Single hostname domains use HTTP-01 validation on a public Gateway. Wildcard domains use DNS-01 validation through the Edka DNS-01 webhook running in your cluster, which works on both public and private MetalLB Gateway classes. cert-manager renews certificates before expiry and Edka attaches them to the Gateway automatically.