[{"data":1,"prerenderedAt":31},["ShallowReactive",2],{"blog-tag-en-cert-manager":3},[4,16,23],{"path":5,"title":6,"description":7,"date":8,"tags":9},"\u002Fblog\u002Fen\u002Fk3s-cert-manager-acme-renewal-pitfalls","A Saturday Morning K3s Outage from an Expired TLS Certificate: Designing ACME Automation That Actually Escapes Manual Renewal","Even with cert-manager installed, K3s production certificates can silently expire due to Issuer misconfiguration, failed DNS validation, Let's Encrypt rate limits, or Secrets that never get reloaded. This post covers the monitoring and design choices that turn ACME auto-renewal from 'installed' into 'actually working.'","2026-08-27",[10,11,12,13,14,15],"k3s","kubernetes","cert-manager","tls","lets-encrypt","acme",{"path":17,"title":18,"description":19,"date":20,"tags":21},"\u002Fblog\u002Fen\u002Fkubernetes-certificate-management-cert-manager-process-debt","The Cert Renewal Took One Line of Code and Two Months of Meetings: Why Kubernetes Certificate Management Is a Process Problem, Not a Technical One","Kubernetes certificate management is technically a matter of days. What actually takes time is the organizational process of getting sign-off. Here's how cert-manager automates the technical side, and how to design away the operational debt that remains.","2026-08-09",[10,11,12,13,22],"security",{"path":24,"title":25,"description":26,"date":27,"tags":28},"\u002Fblog\u002Fen\u002Fcert-manager-automatic-tls","Automating TLS Certificate Management in Kubernetes with cert-manager","Automate TLS certificate issuance and renewal in Kubernetes using cert-manager. Covers Let's Encrypt, ACME challenges, Ingress integration, and best practices.","2026-05-27",[12,11,13,14,15,29,22,30],"cncf","certificates",1792488951549]