Deploy Cert Manager

[mischavandenburg]

Implement cert-manager for TLS Certificate Management

Description

We need to deploy and configure cert-manager to automate the management of TLS certificates in our k3s cluster. This will provide automated certificate issuance and renewal for our cluster services, including ArgoCD and our identity provider.

Requirements

• Deploy cert-manager using GitOps principles
• Configure integration with Let's Encrypt
• Set up ClusterIssuer for staging
• Ensure proper certificate management for cluster ingresses

Technical Considerations

• Must be deployed via GitOps workflow
• Should integrate with our existing ingress setup
• Need to consider rate limits for Let's Encrypt
• DNS validation preferred over HTTP validation for reliability

Tasks

1. Initial Setup

   • Create necessary Kubernetes manifests or Helm deployment
   • Set up monitoring for cert-manager components
   • Configure proper resource requests/limits

2. Let's Encrypt Integration

   • Create staging ClusterIssuer
   • Configure DNS or HTTP challenge solver
   • Document rate limits and restrictions

3. Certificate Management

   • Create certificate templates
   • Set up automated renewal process
   • Configure default certificate settings
   • Implement certificate monitoring

4. Integration Testing

   • Test certificate issuance
   • Verify auto-renewal functionality
   • Test DNS challenge mechanism
   • Validate certificate chain

5. Documentation

   • Document deployment process
   • Create troubleshooting guide
   • Write certificate request procedure
   • Document renewal process

Acceptance Criteria

• cert-manager is successfully deployed and operational
• Automatic certificate issuance works for test domains
• Certificate renewal process is verified
• Integration with existing ingress is confirmed
• Monitoring is in place for certificate expiration

Additional Notes

• Plan for potential Let's Encrypt rate limiting
• Document process for manual certificate requests
• Consider backup solutions for critical certificates

Resources

• cert-manager Documentation
• Let's Encrypt Rate Limits

[vikramreddym]

I am interested in picking this up.