Ingress

[reesericci]

What would you like to be added

Secure kubernetes ingresses with autocert.

Why this is needed

To make it easy to issue certificates to an ingress controller and terminate tls at the ingress.

[maraino]

This is right now not possible with autocert. The current version of autocert injects containers in pods that takes care of authorizing the first certificate, and take care of the renewals.

To make it available on ingresses you need to save the certificates in a kubernetes.io/tls resource, and monitor them to refresh them. Right now this is not something autocert is ready to do. However it would be possible to hack this, using a pod that takes care of updating the resource once a new certificate is issued. This hack would be out of the scope of autocert.

We can consider this issue for an unplanned version of autocert v2.

[reesericci]

ok cool. my cluster dns is out of whack currently :)