cert-manager is a powerful and extensible X.509 certificate controller for Kubernetes and OpenShift workloads. It will obtain certificates from a variety of Issuers, both popular public Issuers as well as private Issuers, and ensure the certificates are valid and up-to-date, and will attempt to renew certificates at a configured time before expiry.
![cert-manager](https://cdn-ak-scissors.b.st-hatena.com/image/square/219c5c2ecf86f18a92237334da978cc40b5d9850/height=288;version=1;width=512/https%3A%2F%2Fcert-manager.io%2Fimages%2Fog1.png)