Gateway API and cert-manager for FREE HTTPS
Source: YouTube · That DevOps Guy · published Feb 5, 2026 · 18:34
BLUF: Cert Manager automates HTTPS certificate issuance using Let's Encrypt for Kubernetes Gateway API, enabling secure, automated TLS for HTTP/HTTPS listeners and mutual TLS in service meshes 2:30.
Key Takeaways:
• Cert Manager uses ACME issuers (e.g., Let's Encrypt) to automate TLS certificate issuance and renewal in Kubernetes and OpenShift clusters 1:11.
• Gateway API requires a TLS certificate to enable HTTPS; Cert Manager creates a Kubernetes TLS secret that the gateway uses on port 443 4:17.
• Two challenge types are supported: HTTP (requires accessible ports 80/443) and DNS (uses DNS provider API tokens, e.g., Cloudflare) to prove domain ownership 11:45.
• A cluster issuer configures the ACME provider and challenge method (HTTP or DNS); HTTP challenges use Gateway API to expose a temporary file for validation 12:37.
• A certificate YAML defines the domain, issuer, and TLS secret name; applying it triggers issuance, verified via cubectl describe certificate 14:47.
• The issued certificate becomes a Kubernetes secret, enabling secure HTTPS traffic; troubleshooting uses logs and CRD events 16:15.
The video concludes with a source code guide and invites viewer feedback on Gateway API experiences and future content.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cloud Security. Commonly maps to: Security Architecture and Engineering, Communication and Network Security. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
[music] So are you running Kubernetes and do you need HTTPS on your web endpoints? Search manager is a cloudnative certificate management solution and it runs on Kubernetes and Open Shift. Search manager can provide TLS giving us HTTPS for services running behind ingress or gateway API. It can also give us mutual TLS between two pods. So service to service communication. It can also give us mutual TLS in a service mesh solution. Now, if you're running gateway API in Kubernetes, you're going to need a certificate to get TLS and to enable HTTPS on your web endpoints. And if you're new to Gateway API, you need to watch this video, which is the introduction to gateway API. This video is all about obtaining [music] that TLS certificate so that we can have HTTPS work in the browser. And this is …