cert-manager

Consult the to get started. No special changes are needed to work with Istio.

Usage

Once we have the certificate created, we should see the secret created in the istio-system namespace. This can then be referenced in the tls config for a Gateway under :

Kubernetes Ingress

Alternatively, a Certificate can be created as described in Istio Gateway, then referenced in the object: