Kubernetes add-on for certificates
Visit WebsiteFreeVisit Website
Tracked since2025
0 reviews trackedThe Bottom Line
Entry price
Free, no paid tier
Biggest pro
Kubernetes cert automation
Biggest con
Kubernetes only
TL;DR - cert-manager
- cert-manager is a Kubernetes add-on that automates TLS certificate management
- It issues and renews certificates from Let's Encrypt and other issuers automatically
- Completely free and open-source
Pricing: Free forever
Best for: Individuals & startups
What is cert-manager?
cert-manager automates TLS certificate management for Kubernetes. Request certificates from Let's Encrypt or other CAs, and cert-manager handles issuance, renewal, and secret management automatically.
Annotations on Ingress resources trigger certificate creation. Renewal happens before expiration. Multiple issuers support different CAs.
Kubernetes operators consider cert-manager essential infrastructure for automated certificate lifecycle management.
Pros & Cons
Pros
- Kubernetes cert automation
- Let's Encrypt integration
- Multiple issuers
- Active development
- CNCF project
Cons
- Kubernetes only
- Learning curve
- Debugging complex
- Documentation dense
- Configuration tricky
Key Features
Certificate managementKubernetes nativeLet's EncryptAuto-renewalMultiple issuersOpen source
Pricing Plans
Pricing checked Jul 12, 2026
Most Popular
Open Source
Free
Self-hosted
- K8s certificates
- Let's Encrypt
- Auto-renewal
- Apache 2.0
Reviews
$99Free with your review
Write a reviewReview cert-manager, get a free AI guide
Share your experience and we will send you Improve Your Thinking Patterns Using ChatGPT, free.
Best cert-manager Alternatives
Top alternatives based on features, pricing, and user needs.
Still deciding?
Most buyers shortlist 2 or 3 tools before committing. Pull a side-by-side comparison or browse the full alternatives shortlist below.
Explore More
cert-manager FAQ
How does cert-manager automate certificate management within Kubernetes?
cert-manager automates TLS certificate management for Kubernetes by handling the issuance, renewal, and secret management of certificates. It triggers certificate creation based on annotations on Ingress resources and ensures renewal occurs before expiration.
What kind of user benefits most from using cert-manager?
cert-manager is primarily beneficial for Kubernetes operators and DevOps teams who need automated certificate lifecycle management. It simplifies the process of securing applications running within a Kubernetes environment.
How is cert-manager priced?
cert-manager is free to use, as it is an open-source project and does not require a paid plan. It is a CNCF project, indicating its community-driven development.
Can cert-manager integrate with various Certificate Authorities?
Yes, cert-manager supports multiple issuers, allowing it to request certificates from various Certificate Authorities, including Let's Encrypt. This flexibility enables users to choose their preferred CA.
What are the main limitations to consider when adopting cert-manager?
A primary limitation of cert-manager is that it is designed exclusively for Kubernetes environments. Users should also be aware of a learning curve, potentially dense documentation, and tricky configuration.
How does cert-manager compare to a tool like Doppler for managing secrets?
cert-manager focuses specifically on automating TLS certificate management within Kubernetes, including issuance and renewal. In contrast, Doppler is a general-purpose secrets management tool that handles various types of secrets across different environments.
Source: cert-manager.io