cert-manager

cert-manager runs in your cluster and issues and renews TLS certificates as Kubernetes resources. Edka uses it for HTTP-01 and DNS-01 certificate flows behind your domains.

1. Issues and renews certificates from Let’s Encrypt
2. Supports multiple issuer types: ACME, self-signed, and CA
3. Manages certificates through Kubernetes-native resources
4. Attaches certificates to Gateway API and ingress controllers automatically

Features available

Edka drives two issuance paths through cert-manager. Hostname domains can use HTTP-01 validation on a public Gateway or DNS-01 validation through the Edka DNS-01 webhook. Wildcard domains always use DNS-01 and can optionally include their base hostname, such as example.com, in Gateway routing with the same certificate. DNS-01 works on public and private Gateway classes. cert-manager renews certificates before expiry and Edka attaches them to the Gateway automatically.