PS Since the procedure had changed, we have rewritten it in a separate article, along with how to obtain a wildcard certificate. www.ekwbtblog.com Postscript ends here (original article below) It was convenient to use "cert-manager" + DNS authentication to automatically update Let's Encrypt on Kubeā¦