A managed certificate lets GKE provision and manage TLS certificates for specified domains automatically. You prove domain ownership, create a GKE-specific ManagedCertificate object listing the domains, and reference it from an Ingress. section 7.2.1
Using a managed certificate replaces several manual certificate tasks:
- Skip the certificate-authority signing step. section 7.2.1
- Avoid copying a private key and certificate into Kubernetes as a Secret. section 7.2.1
- Reference the managed certificate from the Ingress so HTTPS traffic can use the provisioned certificate. section 7.2.1
Publishing example.com
After proving ownership of example.com in Google Cloud, create a ManagedCertificate object for the domain and connect it to the GKE Ingress. Google then provisions and manages the certificate automatically. section 7.2.1
