Search code examples
ssl-certificategoogle-kubernetes-enginelets-encryptgoogle-cloud-rungoogle-anthos

How to automatically renew the Let's Encrypt SSL certificate for Cloud Run for Anthos on Google Cloud with Serverless?

I made a service with Cloud Run for Anthos on Google Cloud, and the SSL certificate is made by Let’s Encrypt. I want to renew the certificate automatically on serverless, not on GCE.

How can I do that?

Can I use cronJob on GKE?

I just manually created the certificate on my laptop.

sudo certbot certonly --manual --preferred-challenges dns -d '*.default.domain'
sudo kubectl create --namespace istio-system secret tls istio-ingressgateway-certs \
--key /etc/letsencrypt/live/default.domain/privkey.pem \
--cert /etc/letsencrypt/live/default.domain/fullchain.pem
Solution

  • Now we have GCP document of "Using managed TLS certificates and HTTPS" https://cloud.google.com/anthos/run/docs/managed-tls