cert-manager
cert-manager: A focused, free certificate controller for automated TLS across Kubernetes and OpenShift. Ranked #22 of 31 in Certificate Management Software by our editors (7.1/10); pricing: Free plan; best for kubernetes teams needing free automatic TLS.
At a glance
- Editor score7.1 / 10
- PricingFree plan
- Best forKubernetes teams needing free automatic TLS
- Free planYes
- Paid fromNone
- Facts checked20 Sep 2026
Where it wins
- Automatic renewal before certificates expire
- Works with Let's Encrypt, Vault, CyberArk, and private PKI
- Stores certificates and private keys in Kubernetes Secrets
Where it doesn't
- Requires a self-hosted Kubernetes or OpenShift environment
- Focused on Kubernetes-based certificate workflows
- Does not provide AI features
Our verdict on cert-manager
cert-manager is an open-source add-on for Kubernetes and OpenShift that obtains, issues, stores, and renews X.509 certificates. It is designed for cluster operators and platform teams managing TLS and related certificate workflows across workloads, Pods, and Ingress controllers. Its Kubernetes resources include Certificate, Issuer, ClusterIssuer, and CertificateRequest, giving teams a declarative way to define certificate issuance and signing requests within the cluster.
Its strongest area is automated certificate lifecycle management. cert-manager renews certificates before expiration and supports configurable renewal windows and renewal policies. Ingress-based issuance can connect certificate workflows to application routing, while Kubernetes Secrets provide a native storage location for issued certificates and private keys. The project also supports multiple X.509 key usages and extended key usages, with category support spanning TLS, mTLS, S/MIME, and code signing. Integrations include Let's Encrypt, HashiCorp Vault, CyberArk Certificate Manager, and private PKI, so teams can use either public or internal certificate authorities.
The trade-off is its narrow deployment focus. cert-manager is self-hosted and built around Kubernetes and OpenShift, so it fits teams already operating those environments rather than organizations seeking a standalone certificate management service. Teams also need to manage the surrounding cluster configuration, issuer resources, Secrets, and Ingress integration themselves. Choose cert-manager when free, open-source automation is a priority and certificate workflows belong inside Kubernetes. Consider a different category of product when you need a platform independent of Kubernetes or a broader certificate-management experience outside cluster operations.
cert-manager pricing
cert-manager fact sheet
| Free plan | Yes |
|---|---|
| Paid from | None |
| Certificate discovery | Not verified |
| Automatic renewal | Yes |
| Deployment automation | Yes |
| Revocation workflows | Not verified |
| Certificate types | Not verified |
| CA integrations | Yes |
| Deployment | Self-hosted |
| Support | Community, Docs |
| Built for | Mid-market, Enterprise (editorial estimate) |
| Integrations | 4 integrations: Let's Encrypt, HashiCorp Vault, CyberArk Certificate Manager, private PKI See all → |
| Pricing | Free plan |
| Website | cert-manager.io |
| Facts checked | 20 Sep 2026 |
cert-manager integrations
cert-manager lists 4 integrations on its own site.
- Let's Encrypt
- HashiCorp Vault
- CyberArk Certificate Manager
- private PKI
See all cert-manager integrations →
Alternatives to cert-manager
- DigiCert Trust Lifecycle ManagerA broad certificate governance platform for hybrid infrastructure and enterprise PKI.9.4
- DigiCert ONEFull certificate lifecycle control for large organizations managing diverse trust environments.9.3
- Keyfactor PlatformA broad certificate lifecycle platform for hybrid enterprise environments.9.1
See all cert-manager alternatives →
Also listed in
Used cert-manager? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used cert-manager for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
cert-manager is listed in our Certificate Management Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/cert-manager/"><img src="https://www.itechguides.com/best/badge/cert-manager.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Guides on certificate management software
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. How we rank.
Last updated · How we research and update