New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Comparison with https://github.com/jetstack/kube-lego? #72

Open

olalonde opened this issue May 4, 2017 · 1 comment

olalonde commented May 4, 2017

A comparison with https://github.com/jetstack/kube-lego would be helpful. AFAICT, both projects have the same goal?

conradev commented Jun 15, 2017 •

edited

Loading

kube-lego can only respond to challenges using the HTTP-01 challenge, and only works for Ingress objects.

kube-cert-manager is a lot more flexible. It:

Supports the other two challenge types (SNI-TLS-01, DNS-01)
Uses xenolf/lego to support a ton of DNS providers
Supports certificates as ThirdParty resources, meaning I can use kube-cert-manager to request TLS certificates for anything, like my IRC bouncer, for example

kube-lego:

Ends up re-implementing a subset of ACME (instead of using xenolf/lego)
Has a much better implementation for HTTP challenges (see Use an Ingress to route and automatically handle HTTP challenges #42)

Let me know if I missed anything!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment