Stay organized with collections
Save and categorize content based on your preferences.
Manage certificate lifecycle using Cert-Manager
This page provides information about using Jetstack
Cert-Manager
with Certificate Authority Service.
Cert-Manager is an open source Kubernetes add-on that automates the management
and issuance of TLS certificates from various issuing sources.
Cert-Manager manages the lifecycle of certificates issued by CA pools that are
created using CA Service. Cert-Manager ensures certificates are
valid and duly renewed before they expire.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-29 UTC."],[[["\u003cp\u003eCert-Manager, an open-source Kubernetes add-on, automates the issuance and management of TLS certificates from various sources.\u003c/p\u003e\n"],["\u003cp\u003eCert-Manager manages the full lifecycle of certificates issued by CA pools created with CA Service, including renewals before expiration.\u003c/p\u003e\n"],["\u003cp\u003eThe provided information focuses on using Jetstack Cert-Manager with Google Cloud's Certificate Authority Service.\u003c/p\u003e\n"],["\u003cp\u003eFor detailed guidance on this integration, refer to the "Certificate Authority Service Issuer for Cert-Manager" README on GitHub.\u003c/p\u003e\n"]]],[],null,["# Manage certificate lifecycle using Cert-Manager\n===============================================\n\n| This page contains a sample provided for demonstration purposes. Google does not officially support this sample. Carefully evaluate any solution before deploying it in your production environment.\n\nThis page provides information about using [Jetstack\nCert-Manager](https://cert-manager.io)\nwith Certificate Authority Service.\n| **Note:** CA Service has a native integration with Certificate Manager for global load balancers. To learn more, see [Use CA Service with Certificate Manager](/certificate-manager/docs/certificates#cert-cas).\n\nCert-Manager is an open source Kubernetes add-on that automates the management\nand issuance of TLS certificates from various issuing sources.\n\nCert-Manager manages the lifecycle of certificates issued by CA pools that are\ncreated using CA Service. Cert-Manager ensures certificates are\nvalid and duly renewed before they expire.\n\nFor instructions on using Cert-Manager with CA Service, see\n[README: Certificate Authority Service Issuer for\nCert-Manager](https://github.com/jetstack/google-cas-issuer/blob/main/README.md).\n\nWhat's next\n-----------\n\n- [Integrating Cert-Manager with Google Cloud Certificate Authority Service](https://blog.jetstack.io/blog/cert-manager-google-cas-issuer/)\n- [GitHub: Cert-Manager](https://github.com/jetstack/cert-manager)\n- [Cert-Manager documentation](https://Cert-Manager.io/docs/)"]]