All Projects → ahmetb → Gke Letsencrypt

ahmetb / Gke Letsencrypt

Licence: apache-2.0
Tutorial for installing cert-manager on GKE get HTTPS certificates from Let’s Encrypt (⚠️NOW OBSOLETE⚠️)

Projects that are alternatives of or similar to Gke Letsencrypt

Echo
High performance, minimalist Go web framework
Stars: ✭ 21,297 (+3243.33%)
Mutual labels:  letsencrypt
Full Stack
Full stack, modern web application generator. Using Flask, PostgreSQL DB, Docker, Swagger, automatic HTTPS and more.
Stars: ✭ 451 (-29.2%)
Mutual labels:  letsencrypt
Acme.sh
A pure Unix shell script implementing ACME client protocol
Stars: ✭ 24,723 (+3781.16%)
Mutual labels:  letsencrypt
Dnsrobocert
Orchestrate Certbot and Lexicon together to provide Let's Encrypt TLS certificates validated by DNS challenges
Stars: ✭ 420 (-34.07%)
Mutual labels:  letsencrypt
Ansible Letsencrypt
An ansible role to generate TLS certificates and get them signed by Let's Encrypt
Stars: ✭ 433 (-32.03%)
Mutual labels:  letsencrypt
Ansible Role Certbot
Ansible Role - Certbot (for Let's Encrypt)
Stars: ✭ 477 (-25.12%)
Mutual labels:  letsencrypt
Acme4j
Java client for ACME (Let's Encrypt)
Stars: ✭ 370 (-41.92%)
Mutual labels:  letsencrypt
Dockerswarm.rocks
Docker Swarm mode rocks! Ideas, tools and recipes. Get a production-ready, distributed, HTTPS served, cluster in minutes, not weeks.
Stars: ✭ 584 (-8.32%)
Mutual labels:  letsencrypt
Marathon Lb
Marathon-lb is a service discovery & load balancing tool for DC/OS
Stars: ✭ 449 (-29.51%)
Mutual labels:  letsencrypt
Ssl Certificate
A class to validate SSL certificates
Stars: ✭ 522 (-18.05%)
Mutual labels:  letsencrypt
Win Acme
A simple ACME client for Windows (for use with Let's Encrypt et al.)
Stars: ✭ 4,305 (+575.82%)
Mutual labels:  letsencrypt
Posh Acme
ACME protocol client for obtaining certificates using Let's Encrypt (or other ACME compliant CA)
Stars: ✭ 425 (-33.28%)
Mutual labels:  letsencrypt
Lego
Let's Encrypt client and ACME library written in Go
Stars: ✭ 4,978 (+681.48%)
Mutual labels:  letsencrypt
Django React Boilerplate
DIY Django + React Boilerplate for starting your SaaS
Stars: ✭ 385 (-39.56%)
Mutual labels:  letsencrypt
Dehydrated
letsencrypt/acme client implemented as a shell-script – just add water
Stars: ✭ 5,261 (+725.9%)
Mutual labels:  letsencrypt
Swarmlet
A self-hosted, open-source Platform as a Service that enables easy swarm deployments, load balancing, automatic SSL, metrics, analytics and more.
Stars: ✭ 373 (-41.44%)
Mutual labels:  letsencrypt
Nginx Le
Nginx with automatic let's encrypt (docker image)
Stars: ✭ 475 (-25.43%)
Mutual labels:  letsencrypt
Website
Let's Encrypt Website and Documentation
Stars: ✭ 629 (-1.26%)
Mutual labels:  letsencrypt
Full Stack Fastapi Postgresql
Full stack, modern web application generator. Using FastAPI, PostgreSQL as database, Docker, automatic HTTPS and more.
Stars: ✭ 7,635 (+1098.59%)
Mutual labels:  letsencrypt
Kube Cert Manager
Manage Lets Encrypt certificates for a Kubernetes cluster.
Stars: ✭ 518 (-18.68%)
Mutual labels:  letsencrypt

💎🔥💎🔥💎

Important Update (April 9,2019)

GKE now has beta support for natively provisioning Let's Encrypt TLS certificates.
This means you should stop using this tutorial and use the feature provided by GKE instead. 💎🔥💎🔥💎

GKE loves Let’s Encrypt!

Let’s Encrypt on GKE

GKE (Google Kubernetes Engine) does not offer an out-of-the-box HTTPS solution or TLS/SSL certificates for your websites today:

  • Let’s Encrypt is a non-profit Certificate Authority that provides free TLS/SSL certificates that can be used to secure websites with HTTPS.
  • cert-manager is a third-party Kubernetes controller that automates getting TLS/SSL certificates from Let’s Encrypt and refreshing them.

⚠️⚠️ cert-manager is pre-stable software and is not officially supported by Google. Use it at your own risk! ⚠️⚠️

Requirements:

  • A registered domain name
  • A GKE cluster
  • Estimated time: 30 minutes.

Steps

  1. Install Helm
  2. Install cert-manager
  3. Set up Let's Encrypt
  4. Deploy a web app on a domain name
  5. Get a certificate for your domain name
  6. Cleanup

What's not covered in this tutorial

  • Redirecting HTTP traffic to HTTPS (not possible with GKE Ingress yet)
  • Securing traffic between Cloud Load Balancer and your app with TLS

Alternative HTTPS proxies

If you're looking for a far simpler third-party solution and you're OK with HTTPS requests from your visitors terminated/proxied by a third-party, these services work with GKE apps:


This is not an official Google product or documentation.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].