• This repository has been archived on 06/Feb/2021
  • Stars
    star
    622
  • Rank 72,178 (Top 2 %)
  • Language
  • License
    Apache License 2.0
  • Created almost 7 years ago
  • Updated almost 5 years ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Tutorial for installing cert-manager on GKE get HTTPS certificates from Let’s Encrypt (⚠️NOW OBSOLETE⚠️)

💎🔥💎🔥💎

Important Update (April 9,2019)

GKE now has beta support for natively provisioning Let's Encrypt TLS certificates.
This means you should stop using this tutorial and use the feature provided by GKE instead.
💎🔥💎🔥💎

GKE loves Let’s Encrypt!

Let’s Encrypt on GKE

GKE (Google Kubernetes Engine) does not offer an out-of-the-box HTTPS solution or TLS/SSL certificates for your websites today:

  • Let’s Encrypt is a non-profit Certificate Authority that provides free TLS/SSL certificates that can be used to secure websites with HTTPS.
  • cert-manager is a third-party Kubernetes controller that automates getting TLS/SSL certificates from Let’s Encrypt and refreshing them.

⚠️⚠️ cert-manager is pre-stable software and is not officially supported by Google. Use it at your own risk! ⚠️⚠️

Requirements:

  • A registered domain name
  • A GKE cluster
  • Estimated time: 30 minutes.

Steps

  1. Install Helm
  2. Install cert-manager
  3. Set up Let's Encrypt
  4. Deploy a web app on a domain name
  5. Get a certificate for your domain name
  6. Cleanup

What's not covered in this tutorial

  • Redirecting HTTP traffic to HTTPS (not possible with GKE Ingress yet)
  • Securing traffic between Cloud Load Balancer and your app with TLS

Alternative HTTPS proxies

If you're looking for a far simpler third-party solution and you're OK with HTTPS requests from your visitors terminated/proxied by a third-party, these services work with GKE apps:


This is not an official Google product or documentation.

More Repositories

1

kubectx

Faster way to switch between clusters and namespaces in kubectl
Go
14,832
star
2

kubernetes-network-policy-recipes

Example recipes for Kubernetes Network Policies that you can just copy paste
5,638
star
3

go-linq

.NET LINQ capabilities in Go
Go
3,501
star
4

kubectl-aliases

Programmatically generated handy kubectl aliases.
Shell
3,346
star
5

kubectl-tree

kubectl plugin to browse Kubernetes object hierarchies as a tree 🎄 (star the repo if you are using)
Go
2,950
star
6

cloud-run-faq

Unofficial FAQ and everything you've been wondering about Google Cloud Run.
Shell
2,313
star
7

govvv

"go build" wrapper to add version info to Golang applications
Go
535
star
8

kubectl-foreach

Run kubectl commands in all/some contexts in parallel (similar to GNU xargs+parallel)
Go
451
star
9

go-dexec

It's like Go os/exec package but for Docker. What if you could exec programs remotely with the same interface as os/exec?
Go
424
star
10

runsd

Drop-in Service Discovery capabilities for Google Cloud Run.
Go
409
star
11

personal-dashboard

📊 Programmatically collecting and reporting various stats about myself daily
Go
337
star
12

gen-crd-api-reference-docs

API Reference Docs generator for Kubernetes CRDs (used by Knative, Kubeflow and others)
Go
294
star
13

wagl

🐝 DNS Service Discovery for Docker Swarm. Works out of the box. (NOW OBSOLETE, USE SWARM MODE)
Go
284
star
14

serverless-registry-proxy

Serverless reverse proxy for exposing container registries (GCR, Docker Hub, Artifact Registry etc) on custom domains.
Go
256
star
15

orman

lightweight and minimalist ORM for Java/Android. works with SQLite & MySQL. (not actively maintained)
Java
249
star
16

sheets-url-shortener

A simple short URL redirect service built on top of Google Sheets, and runs for cheap on Google Cloud Run serverless.
Go
180
star
17

RectangleWin

Spectacle/Rectangle for Windows: Hotkey-driven window snapping for Windows 10/11.
Go
174
star
18

In-Stock

📱 Is the new iDevice in town yet? (no longer maintained)
Objective-C
158
star
19

go-httpbin

http://httpbin.org endpoints for your Go tests
Go
121
star
20

dotfiles

Ahmet's dotfiles and macOS customizations
Shell
120
star
21

kubectl-extras

A collection of mini plugins for kubectl.
Shell
117
star
22

kubectl-pods_on

kubectl plugin to query Pods by Node names or selectors
Go
116
star
23

twitter-audit-log

Back up Twitter follow/mute/block lists periodically using GitHub Actions
Go
92
star
24

goodbye

Notify yourself when someone unfollows you on Twitter
Go
87
star
25

cloud-run-multi-region-terraform

Deploy a Cloud Run app to all available regions using Terraform.
HCL
80
star
26

azurefs

Mount Microsoft Azure Blob Storage as local filesystem in Linux (inactive)
Python
70
star
27

cloud-run-iap-terraform-demo

Deploy an IAP-secured application to Cloud Run using Terraform (e.g. an admin portal or internal company app)
HCL
69
star
28

baklava

Go
65
star
29

kubectl-cond

kubectl plugin to print Kubernetes resource conditions
Go
55
star
30

cloud-run-travisci

Example config for deploying from Travis CI to Google Cloud Run
Python
54
star
31

go-cursor

ANSI escape code helpers for Go
Go
53
star
32

public-speaking

@ahmetb's public speaking engagements & bio
52
star
33

multi-process-container-lazy-solution

Sample code accompanying the blog post:
Python
51
star
34

cloudrun-iamviz

Visualize call permissions between Cloud Run services
Go
48
star
35

serverless-url-redirect

Simple click-to-deploy serverless URL redirect service
Shell
39
star
36

goclone

Clone Go projects to a clean GOPATH and start hacking right away.
Shell
35
star
37

coffeelog

Sample multi-tier cloud-native application hosted on Google Kubernetes Engine (GKE)
Go
34
star
38

skaffold-from-laptop-to-cloud

Docker Voting App deployed to Kubernetes with Skaffold 3 different ways
JavaScript
32
star
39

multi-process-container

Example docker container image with multiple services supervised by s6 init process
Shell
29
star
40

cloud-run-static-outbound-ip

[DEPRECATED] Sample code for Cloud Run to use a static IP for outgoing requests via a SSH tunnel over a GCE instance
Python
29
star
41

dlog

Go library to parse the Docker Logs stream
Go
28
star
42

rundev

(alpha, contact me if you’re using)
Go
28
star
43

coredns-grpc-backend-sample

Sample CoreDNS gRPC proxy backend written in Go
Go
26
star
44

zone-printer

Small web app to print Google Cloud compute region it’s deployed to
Go
25
star
45

ytaudio

Go
25
star
46

turkish-deasciifier-java

Turkish deASCIIfier library for Java
Java
24
star
47

qs

URL query parameters from Go structs
Go
22
star
48

kcat

Syntax highlighting for Kubernetes manifests [WIP]
Go
19
star
49

cloud-run-deploy-via-api-go

Go
18
star
50

docker-registry-driver-azure

[⚠️DO NOT USE THIS - DEPRECATED ⚠️] Docker Registry – Azure Blob Storage Driver
Python
17
star
51

dailybbble

Archiving and serving what is popular on Dribbble every day
Python
13
star
52

twitch-bot

Go
13
star
53

docker-chocolatey

Chocolatey 'docker' package
PowerShell
12
star
54

comcasted

Are you being “Comcast-ed”? Test your speed every 5min and see if you're getting what you're paying.
Python
12
star
55

sorucevap

Go
11
star
56

open-diary-format

Because all diary keeping apps suck. Here's a standard format.
11
star
57

ytdl

Serverless video downloader app (using youtube-dl)
Go
11
star
58

Spark.NET

Wicked ▁▂▃▅▂▇ in your C# programs
C#
10
star
59

permalinker

Right click → Save to cloud → Permalink on your clipboard
Python
10
star
60

kubectl-runbridge

Go
9
star
61

radyo

a js radio plays similar tracks using last.fm & youtube. for my personal usage.
9
star
62

tfjs-cloudrun

JavaScript
9
star
63

kubernetes-secrets-propagation-delay

Go
8
star
64

leetcode-solutions

my solutions to http://leetcode.com/onlinejudge problems
Java
7
star
65

gophercon-ist

7
star
66

tmdb-downloader

Downloads tmdb movies data sequentially and saves to mongodb
Python
7
star
67

sample-bundle-deployment-controller

A sample CRD that deploys a bundle of arbitrary Kubernetes resources with pruning/kustomization capabilities.
Go
7
star
68

simplegauges

Practical time series gauges for daily stats (used in personal-dashboard project)
Python
6
star
69

kubectl-runproxy

🧪[experimental]☢️ a local k8s apiserver to make Cloud Run API work with kubectl (don't use this)
Go
4
star
70

cloudrun-socketio-whiteboard

JavaScript
4
star
71

mysqlbackup

simple python script to get gzipped mysql dumps with easy connection strings
4
star
72

hizlisozluk

Hizli Sozluk Android app
Java
3
star
73

futuremedium-resizer

a handy proportional image resizer and cropper for Java
Java
3
star
74

blobmetadb

Watches your application’s Microsoft Azure Blob Storage requests and keeps record of your blobs on Redis.
C#
3
star
75

instagger

Lamest tool ever. Adds and removes hashtags to your instagram posts.
Go
2
star
76

orman-demos

demo projects playground for orman framework
Java
2
star
77

permalinker-chrome

Chrome extension for Permalinker. Right click any image on the web → Save to cloud → Share link with friends
JavaScript
2
star
78

cs352project

a useless CS 352 CRUD term project. uploading only for code storage purposes.
PHP
2
star
79

orman-clickgame

a click game implemented with orman and sqlite
Java
2
star
80

github-activity-recorder

2
star
81

swap

file name swapping utility for Unix systems
C
2
star
82

home-ac-stats

Push stats from Sensibo AC controller to Google Cloud Monitoring
Go
2
star
83

runstatic

Go
1
star
84

krew-index-autoapprove

Go
1
star
85

blog-docker

Docker image for my blog's nginx server 🌵
Nginx
1
star
86

kubectl-colorful

Shell
1
star
87

rtmpsave

Listens to a RTMP stream, encodes to specified audio format and uploads audio to Azure Blob Storage
Go
1
star
88

yayinakisi

Yayin Akisi Android App
Java
1
star
89

colorify

colorify windows phone 7 app
C#
1
star