Transport Layer Security (TLS)
|
Important
|
Ingress NGINX Retirement
The Kubernetes community has announced that the Ingress NGINX controller is being retired, with best-effort maintenance only until March 2026. The Gateway API is the recommended replacement. The instructions below reference NGINX Ingress and may need to be adapted if you’re using the Gateway API. |
To help with using letsencrypt, there’s an option in the Terraform variables to enable letsencrypt and certmanager in the cluster.
After certmanager is installed, you’ll still need to create the cluster issuer.
After the cluster issuer is created, the next steps are to configure the ingress to use these certificates. You can follow the same Microsoft guide for this.
If you plan to use normal certificates, it’s best to follow Microsoft’s tips on how to set up Secrets Store CSI Driver to Enable NGINX Ingress Controller with TLS.