Member-only story

Deploying ingress in Kubernetes with cert-manager, Letsencrypt and Cloudflare

tjtharrison
7 min readSep 18, 2023

--

In this article we are going to be covering how to deploy an ingress LoadBalancer service into your Kubernetes cluster with Letsencrypt certificates which are automatically renewed via the Cloudflare API.

Before proceeding, this article does assume that you already have a Cloudflare account configured for your domain and the ability to create an API token for authentication.

Photo by Kaffeebart on Unsplash

But why?

I am starting to host more services on my Kubernetes cluster, if you’ve been following my journey — I have recently set up a Homelab Kubernetes cluster to help with training for my CKA/CKS exams.

Setting up homelab 3.0
Installing a bare-metal Kubernetes cluster with Ansible

In the interest of security, I would like to ensure that all services that I host on my cluster are secured using TLS and I am not exposing unencrypted services to my network.

The ingress spec was introduced in Kubernetes v1.19 and provide a way of specifying routing and certificates for web services hosted in Kubernetes.

--

--

tjtharrison
tjtharrison

Written by tjtharrison

DevSecOps | Security | Infrastructure

Responses (1)