cert-manager
Certificate lifecycle management for securing Runtime endpoints.
Component Category
Access and security / certificate management
Component Description
cert-manager automates the issuance, renewal, and management of TLS certificates in Kubernetes.
Why It Is Used
In BullSequana AI Runtime, cert-manager helps secure platform endpoints with managed certificates and reduces the operational burden of handling certificate lifecycles manually. This is important for ingress exposure, trusted service endpoints, and the general security posture of a production platform.
Learn More
Deployment notes
cert-manager deploys into the cert-manager namespace at sync wave 3 in the common tier. It installs CRDs via the Helm chart and provisions a Let's Encrypt cluster issuer (when Azure DNS is enabled) and a self-signed CA chain cluster issuer. Custom TLS certificates can be supplied through the platform configuration when Let's Encrypt is not available.
Interacts With
Gateway API, which references cert-manager-issued TLS certificates on the shared Gateway resource.trust-manager, which distributes the CA trust bundles from cert-manager-managed CAs across namespaces. Both share thecert-managernamespace.External DNS, because certificate issuance depends on the same DNS and domain setup.Rook Ceph, whose RGW and dashboard endpoints use cert-manager-managed certificates.