It was convenient to use "cert-manager" + DNS authentication to automatically update Let's Encrypt on Kubernetes (GKE) without processing on the service side. I wrote Introductory note before, but the procedure had changed, so I rewrote it with how to get a wildcard certificate. Based on the offici…