--- title: Kubernetes ACME Integration with OpusDNS description: Learn how Kubernetes ACME integration with OpusDNS automates SSL/TLS certificate management using cert-manager and DNS-01 challenges for secure, scalable cloud-native environments. --- [Skip to content](https://help.opusdns.com/kubernetes-acme-integration-with-opusdns#main-content) - [English](https://help.opusdns.com/kubernetes-acme-integration-with-opusdns) - [Deutsch](https://help.opusdns.com/de/kubernetes-acme-integration-with-opusdns) English Show submenu for translations [![opusdns.com](https://help.opusdns.com/hs-fs/hubfs/v2-Status%20Center.png?width=180&height=51&name=v2-Status%20Center.png)](https://help.opusdns.com/?hsLang=en) Open main navigation Close main navigation - - [English](https://help.opusdns.com/kubernetes-acme-integration-with-opusdns) - [Deutsch](https://help.opusdns.com/de/kubernetes-acme-integration-with-opusdns) English Show submenu for translations - [Submit Ticket](https://support.opusdns.com/) [Submit Ticket](https://support.opusdns.com/?hsLang=en) How can we help? - There are no suggestions because the search field is empty. 1. [OpusDNS Knowledgebase](https://help.opusdns.com/?hsLang=en) 2. [Services & Features](https://help.opusdns.com/services-features?hsLang=en) 3. [Certificate Management with ACME and OpusDNS](https://help.opusdns.com/services-features?hsLang=en#certificate-management-with-acme-and-opusdns) June 15, 2026 # Kubernetes ACME Integration with OpusDNS ### Introduction Kubernetes is an open-source platform used to run and manage containerized applications at scale. It is widely used by cloud-native companies, DevOps teams, and enterprises to deploy microservices, APIs, and distributed systems in a reliable and automated way. One of the key challenges in Kubernetes environments is managing TLS certificates. Because services are dynamic and frequently created or scaled, manual certificate handling is not practical. This is where ACME-based automation becomes essential. ### What is Kubernetes? Kubernetes is a container orchestration system that automates the deployment, scaling, and management of applications in containers. It is commonly used for: - Microservices architectures - Cloud-native applications - Scalable APIs and backend systems - Multi-cloud and hybrid infrastructure Kubernetes helps teams manage complex infrastructure by handling scheduling, scaling, and service discovery automatically. ### Why ACME in Kubernetes? In Kubernetes environments, services change frequently. New pods, services, and ingress resources are constantly created and removed. This creates challenges for TLS management: - Frequent certificate renewals - Dynamic domains and ingress endpoints - Need for wildcard certificates - High automation requirements ACME solves this by automating the full certificate lifecycle: - Domain validation - Certificate issuance - Renewal and rotation ### Kubernetes ACME Integration with OpusDNS The OpusDNS integration enables Kubernetes to automatically manage SSL/TLS certificates using cert-manager and ACME DNS-01 challenges. To use our integration, you must install cert-manager for Kubernetes: [https://github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) GitHub Repository: [https://github.com/OpusDNS/cert-manager-webhook-opusdns](https://github.com/OpusDNS/cert-manager-webhook-opusdns) ### How the Integration Works The integration is based on cert-manager, the standard Kubernetes tool for certificate automation. The process works as follows: 1. A Certificate resource is created in Kubernetes 2. cert-manager detects the request 3. An ACME challenge is created (DNS-01) 4. The OpusDNS webhook is triggered 5. The webhook uses the OpusDNS API 6. A DNS TXT record is created automatically 7. The ACME provider validates the domain 8. The certificate is issued and stored as a Kubernetes Secret 9. The temporary DNS record is removed Everything runs fully automated after initial setup. ### Key Benefits #### Fully automated certificate management No manual DNS or certificate handling is required. #### Kubernetes-native integration Certificates are managed as native Kubernetes resources via cert-manager. #### DNS-01 challenge support Enables wildcard certificates and works without exposing HTTP endpoints. #### API-based DNS automation OpusDNS handles DNS record creation securely via API. #### Scalable architecture Works across multiple clusters and environments.   ### Conclusion The Kubernetes ACME integration with OpusDNS provides a fully automated way to manage TLS certificates using cert-manager and DNS-01 challenges. It eliminates manual certificate operations, supports scalable cloud-native architectures, and ensures secure and reliable certificate lifecycle management in Kubernetes environments. GitHub Repository: [https://github.com/OpusDNS/cert-manager-webhook-opusdns](https://github.com/OpusDNS/cert-manager-webhook-opusdns)     [![Knowledge Banner\_ Github Dark (1)](https://help.opusdns.com/hs-fs/hubfs/Knowledge%20Banner_%20Github%20Dark%20(1).jpg?width=670&height=174&name=Knowledge%20Banner_%20Github%20Dark%20(1).jpg)](https://github.com/OpusDNS?utm_source=knowledgebase&utm_medium=referral&utm_campaign=signup&utm_content=cta_banner)   - [Create your OpusDNS account](https://help.opusdns.com/create-your-opusdns-account?hsLang=en#main-content) - [Open Your Account](https://help.opusdns.com/create-your-opusdns-account?hsLang=en#open-your-account) - [FAQ](https://help.opusdns.com/create-your-opusdns-account?hsLang=en#faq) - [Getting Help with your Registration](https://help.opusdns.com/create-your-opusdns-account?hsLang=en#getting-help-with-your-registration) - [OpusDNS API](https://help.opusdns.com/opusdns-api?hsLang=en#main-content) - [Getting Started with the API](https://help.opusdns.com/opusdns-api?hsLang=en#getting-started-with-the-api) - [Sandbox Environment](https://help.opusdns.com/opusdns-api?hsLang=en#sandbox-environment) - [OpusDNS MCP Server](https://help.opusdns.com/opusdns-api?hsLang=en#opusdns-mcp-server) - [FAQ](https://help.opusdns.com/opusdns-api?hsLang=en#faq) - [Getting Help with the OpusDNS API](https://help.opusdns.com/opusdns-api?hsLang=en#getting-help-with-the-opusdns-api) - [OpusDNS Dashboard](https://help.opusdns.com/opusdns-dashboard?hsLang=en#main-content) - [Getting Started](https://help.opusdns.com/opusdns-dashboard?hsLang=en#getting-started) - [Plans & Pricing](https://help.opusdns.com/opusdns-dashboard?hsLang=en#plans-pricing) - [Billing & Payments](https://help.opusdns.com/opusdns-dashboard?hsLang=en#billing-payments) - [User & Organization Management](https://help.opusdns.com/opusdns-dashboard?hsLang=en#user-organization-management) - [Whitelabeling](https://help.opusdns.com/opusdns-dashboard?hsLang=en#whitelabeling) - [Account & Settings](https://help.opusdns.com/opusdns-dashboard?hsLang=en#account-settings) - [Security](https://help.opusdns.com/opusdns-dashboard?hsLang=en#security) - [Managing Contacts](https://help.opusdns.com/opusdns-dashboard?hsLang=en#managing-contacts) - [Managing DNS Zones & Nameservers](https://help.opusdns.com/opusdns-dashboard?hsLang=en#managing-dns-zones-nameservers) - [Register & Transfer Domains](https://help.opusdns.com/opusdns-dashboard?hsLang=en#register-transfer-domains) - [Managing Domains](https://help.opusdns.com/opusdns-dashboard?hsLang=en#managing-domains) - [Bulk Jobs](https://help.opusdns.com/opusdns-dashboard?hsLang=en#bulk-jobs) - [Developer Area](https://help.opusdns.com/opusdns-dashboard?hsLang=en#developer-area) - [Dashboard Functionality](https://help.opusdns.com/opusdns-dashboard?hsLang=en#dashboard-functionality) - [Dashboard home page](https://help.opusdns.com/opusdns-dashboard?hsLang=en#dashboard-home-page) - [Services & Features](https://help.opusdns.com/services-features?hsLang=en#main-content) - [Domain forwarding](https://help.opusdns.com/services-features?hsLang=en#domain-forwarding) - [Email forwarding](https://help.opusdns.com/services-features?hsLang=en#email-forwarding) - [Reports](https://help.opusdns.com/services-features?hsLang=en#reports) - [Domain parking](https://help.opusdns.com/services-features?hsLang=en#domain-parking) - [WHMCS Integration](https://help.opusdns.com/services-features?hsLang=en#whmcs-integration) - [Hostware Integration](https://help.opusdns.com/services-features?hsLang=en#hostware-integration) - [Terraform Integration](https://help.opusdns.com/services-features?hsLang=en#terraform-integration) - [GO Integraton](https://help.opusdns.com/services-features?hsLang=en#go-integraton) - [Certificate Management with ACME and OpusDNS](https://help.opusdns.com/services-features?hsLang=en#certificate-management-with-acme-and-opusdns) - [New to the Domain Industry?](https://help.opusdns.com/new-to-the-domain-industry?hsLang=en#main-content) - [Everything about Domains](https://help.opusdns.com/new-to-the-domain-industry?hsLang=en#everything-about-domains) - [Domain Industry](https://help.opusdns.com/new-to-the-domain-industry?hsLang=en#domain-industry) - [Reseller Essentials](https://help.opusdns.com/new-to-the-domain-industry?hsLang=en#reseller-essentials) - [TLD information](https://help.opusdns.com/tld-information?hsLang=en) - [OpusDNS Homepage](https://www.opusdns.com/) - [Legal Notice](https://www.opusdns.com/legal/notice-impressum) - [Privacy Policy](https://www.opusdns.com/legal/privacy-policy) - [Terms & Conditions](https://www.opusdns.com/legal/terms-conditions) [![OpusDNS Homepage](https://help.opusdns.com/hubfs/6722ae7333e645c8919a4751_opusDNS-VT-3c-white-tagline.svg "OpusDNS Homepage")](https://www.opusdns.com/) ©2025 OpusDNS GmbH. All rights reserved. ![icann](https://help.opusdns.com/hubfs/icann.svg).