<p>Is there way how to setup wildcard certificate in Kong-Ingress-Controller to be used in each Ingress?</p>
<p>I have Kong installed from chart:</p>
<pre><code>$ helm repo add kong https://charts.konghq.com
$ helm repo update

$ helm install kong/kong --generate-name --set ingressController.enabled=true --set admin.enabled=True --set admin.http.enabled=True --set ingress.enabled=True --set proxy.ingress.enabled=True --set admin.type=LoadBalancer --set proxy.type=LoadBalancer
</code></pre>
<p>And I would like to use https</p>

<p>In the Kong ingress controller, there is a plugin to auto manage <strong>HTTPS</strong> certificate and get from let's encrypt.</p>
<p>How you can use the <a href="https://cert-manager.io/docs/" rel="nofollow noreferrer">cert-manager</a> with the <strong>Kong</strong> ingress and it will do it for you.</p>
<p><a href="https://cert-manager.io/docs/" rel="nofollow noreferrer">Cert-manager</a> will generate the wild card certificate and store it inside the K8s secret and you can attach the K8s secret(storing wildcard cert) with ingress.</p>
<p>Make sure you have the DNS auth method in the cert-manager for auth.</p>
<p>Steps to get wild card cert : <a href="https://medium.com/@harsh.manvar111/wild-card-certificate-using-cert-manager-in-kubernetes-3406b042d5a2" rel="nofollow noreferrer">https://medium.com/@harsh.manvar111/wild-card-certificate-using-cert-manager-in-kubernetes-3406b042d5a2</a></p>
<p>in your case ingress will be looking like something</p>
<pre><code>apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    kubernetes.io/ingress.class: kong  &lt;---------- Ingress controller classs name
    nginx.ingress.kubernetes.io/ssl-redirect: &quot;false&quot;
    certmanager.k8s.io/issuer: &quot;letsencrypt-prod&quot;
    certmanager.k8s.io/acme-challenge-type: dns01 &lt;------ Use DNS-01 instead HTTP otherwise wildcard wont work
    certmanager.k8s.io/acme-dns01-provider: route53 &lt;------ DNS provider
  name: ingress-resource-tls
  namespace: default
spec:
  rules:
  - host: &quot;hello.devops.example.in&quot;
    http:
      paths:
      - backend:
          serviceName: hello-app
          servicePort: 8080
        path: /
        pathType: ImplementationSpecific
  tls:
  - hosts:
    - &quot;hello.devops.example.in&quot;
    secretName: tls-secret
</code></pre>
