_{🔗 cert-manager – Past, Present and Future — Jake Sanders (cert-manager Maintainer) & Ashley Davis (Jetstack): 🎥 Watch here | 📄 Slides | 🧾 Summary}

cert-manager is the Cloud Native way to manage X.509 certificates inside Kubernetes. It's often one of the first tools administrators install on a new cluster, reaching over 15 million image pulls per day! The project recently entered the CNCF incubation phase after two years in the sandbox. In this talk, two maintainers discuss why cert-manager matters, its evolution, and what’s next.

_{🔗 Cert-Manager Beyond Ingress – Exploring the Variety of Use Cases - Matthew Bates, Jetstack 🎥 Watch here} | 📄 Slides | 🧾 Summary

Cert-manager is a widely used project for the automation of X.509 TLS certificates. In 2020, it reached 1.0 and landed in the CNCF Sandbox. cert-manager has been popularised by its support of ACME and Ingress, enabling many millions of certificates to be issued and renewed, and to help secure the cloud native web with Kubernetes and all the various ingress controllers. But cert-manager, with its custom resources and controllers, extensible with issuers including those out-of-tree, can also be used for a myriad of other use cases in which certificates are required. This talk will walk through the various use cases for cert-manager, including ingress, control plane and nodes (kubeadm, CAPI), webhooks, intra-service mTLS (cert-manager-csi) and service mesh (OpenServiceMesh, Istio).

_{🔗 Best Friends Keep No Secrets: Going Secretless with cert-manager - Ashley Davis & Tim Ramlot, Venafi 🎥 Watch here} | 📄 Slides | 🧾 Summary

In today's complex Kubernetes environments, managing secrets securely is a challenge. Traditional methods often involve complex configurations with secret vaults, secret syncing and secret backups. Regardless of which fancy technology is used, secrets always come with a risk of being leaked. Most of the secrets used in traditional applications can be replaced by short-lived certificates. Applications can prove to be the owner of a certificate without sharing any secrets. In Kubernetes, cert-manager can be used to provision these certificates to all applications without sharing any secret information. Table of contents: - Do we actually need secrets? Comparing authentication methods: static secrets vs short-lived secrets and proof of ownership - H ow to issue certificates using cert-manager without using [S|s]ecrets - Compatibility and other challenges

_{🔗 title 🎥 Watch here} | 📄 Slides | 🧾 Summary

blablabla...