{"avoid_when":"单机或无 K8s 的证书场景","content_hash":"ed9a4a63a15c173d99fb18cbccc03b69485774bcfaf8ad30bfcdc97fb6f6faf9","domain":"devops","evidence_urls":["https://github.com/cert-manager/cert-manager"],"id":"cert-manager","language":"Go","license":"Apache-2.0","name":"cert-manager","niche":"k8s certificates","repo":"https://github.com/cert-manager/cert-manager","source_updated_at":"2026-07-21T20:32:39Z","status":"active","summary":"Kubernetes 证书签发与轮换控制器，常对接 Let’s Encrypt。","tags":["networking","orchestration"],"use_when":"集群内 Ingress/工作负载要自动 TLS 证书生命周期","verification_status":"verified","verified_at":"2026-07-21T20:32:39Z"}