awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
jetstack avatar

jetstack/cert-manager

0
View on GitHub↗
cert-manager.io↗

Cert Manager

cert-manager is a Kubernetes TLS certificate manager and cluster add-on that automates the issuance and renewal of TLS certificates. It functions as a certificate lifecycle automator, managing certificates as native Kubernetes resources to secure internal and external network traffic.

The project includes an ACME protocol client to automate certificate requests and validations from providers. It utilizes a controller to synchronize the desired state of certificates with responses from various certificate authorities.

The system covers certificate provisioning from external issuers and vault systems, tracking expiration dates, and performing automatic renewals to prevent service outages. It integrates with Kubernetes secrets to store certificates and private keys for use by cluster workloads.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Features

  • Certificate Lifecycle Management - Automates the full lifecycle of security certificates, including issuance, rotation, and revocation.
  • Declarative Certificate Resources - Allows certificates and issuers to be defined as native Kubernetes resources for simplified deployment and tracking.
  • Resource Controllers - Provides a custom controller that synchronizes the state of certificate resources within the Kubernetes cluster.
  • ACME Implementations - Implements the ACME protocol to automate certificate requests and validations from providers like Let's Encrypt.
  • Certificate Lifecycle Managers - Acts as a background service that automates the ongoing maintenance and renewal of security certificates.
  • Certificate Renewal Managers - Automatically monitors expiration dates and requests new certificates to ensure continuous service availability.
  • SSL/TLS Certificate Management - Provisions TLS certificates from external issuers and vault systems to secure internal and external network traffic.
  • Certificate Expiry Tracking - Periodically scans stored certificates to identify those nearing expiration and trigger automatic renewal workflows.
  • Kubernetes Security - Secures Kubernetes network traffic by automating the provisioning of TLS certificates for cluster workloads.
  • Infrastructure Add-ons - Functions as a cluster-level add-on that extends Kubernetes with native certificate management capabilities.
  • Declarative Security Configurations - Defines certificates and issuers as cluster resources to enable infrastructure-as-code security management.
  • Secret Management Integrations - Integrates with Kubernetes secrets to store issued TLS certificates and private keys for workload consumption.
  • Plugin-Based Architectures - Employs a plugin-based architecture to support diverse certificate authorities via a common abstraction layer.
  • State Reconciliation - Uses a reconciliation loop to continuously synchronize the current certificate status with the desired specification.
  • Networking - Automates TLS certificate management and issuance.
  • Security and Compliance - Automated TLS certificate management for Kubernetes.
  • SSL Management - Kubernetes-native controller for automated TLS certificate management.
13,866 stars·2,383 forks·Go·Apache-2.0·25 views

Star history

Star history chart for jetstack/cert-managerStar history chart for jetstack/cert-manager

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

Frequently asked questions

What does jetstack/cert-manager do?

cert-manager is a Kubernetes TLS certificate manager and cluster add-on that automates the issuance and renewal of TLS certificates. It functions as a certificate lifecycle automator, managing certificates as native Kubernetes resources to secure internal and external network traffic.

What are the main features of jetstack/cert-manager?

The main features of jetstack/cert-manager are: Certificate Lifecycle Management, Declarative Certificate Resources, Resource Controllers, ACME Implementations, Certificate Lifecycle Managers, Certificate Renewal Managers, SSL/TLS Certificate Management, Certificate Expiry Tracking.

Which projects share features with jetstack/cert-manager?

Projects with overlapping indexed features include: smallstep/certificates — This project is a public key infrastructure management system designed to automate the issuance, renewal, and… cert-manager/cert-manager — This project is a Kubernetes controller that automates the issuance, renewal, and lifecycle management of TLS… allinssl/allinssl — Allinssl is a multi-platform certificate manager and ACME automator designed to handle the full lifecycle of security… go-acme/lego — Lego is an ACME certificate manager and lifecycle tool used to automate the request, renewal, and revocation of SSL… certd/certd — Certd is a self-hosted platform that automates the full lifecycle of SSL certificates using the ACME protocol. It… cilium/cilium — Cilium is a networking, security, and observability platform for containerized environments that leverages…

Projects sharing features with Cert Manager

These projects share indexed features with Cert Manager. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • smallstep/certificatessmallstep avatar

    smallstep/certificates

    8,245View on GitHub↗

    This project is a public key infrastructure management system designed to automate the issuance, renewal, and revocation of X.509, TLS, and SSH certificates. It functions as a machine identity provider and certificate authority, enabling the establishment of private PKI to secure inter-service communication and remote access. The system distinguishes itself through hardware-bound identity attestation, which ties cryptographic keys to physical device silicon or TPMs to prevent credential exfiltration. It supports a wide array of identity verification mechanisms, including OIDC, cloud-provider

    Goacmeacme-serverca
    View on GitHub↗8,245
  • cert-manager/cert-managercert-manager avatar

    cert-manager/cert-manager

    13,578View on GitHub↗

    This project is a Kubernetes controller that automates the issuance, renewal, and lifecycle management of TLS certificates. It functions as a native extension to the cluster API, using custom resource definitions and reconciliation loops to maintain the desired state of certificates and trust bundles across distributed services. By integrating directly with the cluster's admission control and secret storage systems, it ensures that cryptographic identities are consistently provisioned and available for application workloads. The project distinguishes itself through its extensive support for a

    Gocertificatecrdhacktoberfest
    View on GitHub↗13,578
allinssl/allinsslallinssl avatar

allinssl/allinssl

3,359View on GitHub↗

Allinssl is a multi-platform certificate manager and ACME automator designed to handle the full lifecycle of security certificates. It provides a web-based management interface to orchestrate the issuance, renewal, and deployment of certificates across various servers and cloud environments. The system distinguishes itself through an orchestration engine that pushes certificates to diverse targets, including web application firewalls, server control panels, and remote hosts. It automates domain ownership verification using DNS challenges across multiple providers and employs an event-driven w

TypeScriptacmeautomationgo
View on GitHub↗3,359
  • go-acme/legogo-acme avatar

    go-acme/lego

    9,689View on GitHub↗

    Lego is an ACME certificate manager and lifecycle tool used to automate the request, renewal, and revocation of SSL and TLS certificates. It implements the ACME protocol to communicate with compliant certificate authorities and manages the full issuance process, including account registration and private key rollovers. The project distinguishes itself through extensive DNS automation, utilizing a provider-based abstraction to solve DNS-01 challenges across various third-party DNS providers. It supports advanced verification workflows such as CNAME-based challenge delegation, DNS zone discover

    Goacmeacme-clientcertificate
    View on GitHub↗9,689
    • Compare all 30 related projects→