Use GKE managed certificates to enable ingress SSL

Using Google Managed Certificates to enable easy SSL

Use GKE managed certificates to enable ingress SSL
Photo by Markus Winkler / Unsplash

It is not necessary to install cert manager on GKE to provide SSL certificates to ingresses.

Google Kubernetes Engine provides a custom resource to administer Google managed certificates.

1-Create the custom resource

# Google managed certificate
apiVersion: networking.gke.io/v1
kind: ManagedCertificate
metadata:
  name: managed-certificate-demo
spec:
  domains:
    - demo.mayan.cloud

2-Add the managed certificate to the ingress resource

kubectl patch ingress demo-frontend -p '{"metadata": {"annotations":{"networking.gke.io/managed-certificates":"managed-certificate-demo"}}}'