Skip to content

Certificate Manager Configuration

The Certificate Manager service manages TLS certificates in a Shoot cluster using the standard cert-manager CRDs, without the need to install cert-manager yourself.

This page describes how to configure the service in the OSC Dashboard. For details about the extension's functionality, limitations, and example manifests, refer to the Gardener certification manager documentation.

Note

The Certificate Manager is disabled by default. It has to be explicitly enabled for a Shoot cluster.

Configuring Certificate Manager in the OSC Dashboard

On an existing Shoot

  1. Open the Shoot detail page.
  2. Scroll to the Cluster Services section.
  3. Click the cog button next to Certificate Manager.
  4. Switch the service to Enabled.
  5. Adjust the configuration in the Edit configuration tab if needed.
  6. Type the Shoot name into the confirmation field.
  7. Click Save.

Certificate Manager configuration dialog

During Shoot creation

  1. In your project, click Create Cluster to open the new Shoot form.
  2. Scroll to the Cluster Services section.
  3. Click the cog button next to Certificate Manager.
  4. Enable and configure the service.
  5. Click Save to close the dialog.
  6. Fill in the remaining fields.
  7. Click Create.

Configuration options

  • Enable Gateway API: automates certificate provisioning for Gateway API resources. Disabled by default.
  1. Hover over the help icon next to the field to see its type, allowed values and an example.
  2. Review the Provider configuration preview on the right — it shows the resulting manifest entry.

The dialog will alert you if a change impacts the running cluster — please review all warnings before saving.

For the full extension specification and usage examples, see the Gardener certification manager reference.