Kubernetes

Everything above is about certificates. For the other half of a cluster's DNS, a Service or Ingress that should have a hostname at all, there is an external-dns provider. It runs as a sidecar beside external-dns, takes the same kind of API key, and mints a hostname for each annotated Service. Pair it with the cert-manager solver above and the cluster handles both the name and its certificate.

Every recipe is verified against the client's current release. The other integrations cover the rest, and the quickstart goes from a bare address to HTTPS without any of them.