External

cert-manager supports external Issuer types. These external Issuer types are issuers that are not support by cert-manager by default, or are ‘out of tree’, however are treated the exact same as any other internal Issuer type. External issuer types are typically installed by deploying another pod into your cluster that will watch CertificateRequest resources and honor them based on configured Issuer resources. These issuer types exist outside of the cert-manager.io group.

As of v0.11, no changes need to be made to cert-manager to support external issuers.

The recommended installation process and configuration options for these external issuer types can be found in the documentation of that external issuer project. A list of known external issuer projects that are maintained by their authors are as follows:

To create your own external issuer type, please follow the guidance in the development documentation.

Last modified November 18, 2019: Fixes configuration (08270ae)