# Lets Encrypt for cluster applications how?

**URL:** <https://forums.suse.com/t/lets-encrypt-for-cluster-applications-how/16134>\
**Category:** SUSE Rancher Prime\
**Created:** [December 22, 2019, 2:12pm UTC](https://forums.suse.com/t/lets-encrypt-for-cluster-applications-how/16134 "2019-12-22T14:12:47Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![111](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/111/32/5926_2.png) [@111](https://forums.suse.com/u/111)\
**Post date:** [December 22, 2019, 2:12pm UTC](https://forums.suse.com/t/lets-encrypt-for-cluster-applications-how/16134/1 "2019-12-22T14:12:47Z")

</div>

![Screenshot_41](https://us1.discourse-cdn.com/flex022/uploads/suse/original/2X/5/52ab9e90f8507918e05fd45df804df59662133ea.jpeg)  
I deployed the application in the cluster and want to enable the ssl certificate Lets encrypt for it. What tools and procedures do you have in Rancher for this? Thank you!

---

<div class="post-metadata">

**Author:** ![everton.andrade](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/everton.andrade/32/5875_2.png) [@everton.andrade](https://forums.suse.com/u/everton.andrade)\
**Post date:** [December 30, 2019, 11:52am UTC](https://forums.suse.com/t/lets-encrypt-for-cluster-applications-how/16134/2 "2019-12-30T11:52:07Z")

</div>

Hi @111

There are a few different ways to configure SSL certificate to your applications, you can try the following one to have your urls certified.

First, configure **Cert Manager** in your environment, you can configure it following the procedure specified in their webpage: [https://cert-manager.io/docs/installation/kubernetes/](https://cert-manager.io/docs/installation/kubernetes/)

Second, configure a **ClusterIssuer** as the example below:

```
apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer
metadata:
  name: letsencrypt-prod
spec:
  acme:
    email: <your-email@mail.com>
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    #For Staging https://acme-staging-v02.api.letsencrypt.org/directory
    #For Production: https://acme-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: account-private-key
    solvers:
      - selector: {}
        http01:
          ingress:
            class: nginx

```

And finally configure you Ingress to use the cluster-issuer as the following example:

```
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: node
  annotations:
kubernetes.io/ingress.class: "nginx"
cert-manager.io/cluster-issuer: "letsencrypt-prod"
kubernetes.io/tls-acme: "true"
spec:
  tls:
- hosts:
    - webpage.example.com
  secretName: ingress-cert
  rules:
- host: webpage.example.com
  http:
    paths:
      - path: /
        backend:
          serviceName: node
          servicePort: 80

```

I hope it helps you somehow 😁

---

<div class="post-metadata">

**Author:** ![111](https://sea2.discourse-cdn.com/flex022/user_avatar/forums.suse.com/111/32/5926_2.png) [@111](https://forums.suse.com/u/111)\
**Post date:** [December 30, 2019, 6:28pm UTC](https://forums.suse.com/t/lets-encrypt-for-cluster-applications-how/16134/3 "2019-12-30T18:28:52Z")

</div>

**ClusterIssuer** is which section in the rancher? I can’t find out which section I can create this entry in.