Editorial question45.6K views1,856 votes0 answers2,885 following
AI-generatedCert-Manager Issuer Boundary: Local Self-Signed to External CA in Rancher
The cert-manager clusterissuer resource in Rancher defaults to a local self-signed certificate authority for development clusters, while production environments often require an externally provisioned CA to satisfy TLS handshake requirements across trusted domains. This configuration boundary directly impacts workload certificate validity and inter-cluster t