<p>I was investigating certain things things about <code>cert-manager</code>.</p>
<p><code>TLS certificates</code> are automatically recreated by cert-manager.</p>
<p>I need to somehow <strong>deregister a domain / certificate</strong> from being regenerated. I guess I would need to tell cert-manager not to take care about a given domain anymore.</p>
<p>I do not have any clue how to do that right now. Can someone help?</p>

<p><code>cert-manager</code> is an application implemented using the <a href="https://kubernetes.io/docs/concepts/extend-kubernetes/operator/" rel="nofollow noreferrer">operator pattern</a>.</p>
<p>In one sentence, it watches for a <code>Custom Resource</code> (<code>CR</code> for short) named <code>Certificate</code> in the Kubernetes API and it creates and updates <code>Secrets</code> resources to store certificate data.</p>
<p>If you delete the <code>Secret</code> resource but don't delete the <code>Certificate</code> CR, <code>cert-manager</code> will recreate the secret for you.</p>
<p>The right way of &quot;deregister a domain&quot; or to better say it &quot;make cert-manager not generate a certificate for a domain any more&quot; is to delete the <code>Certificate</code> CR related to your domain.</p>
<p>To get a list of all the <code>Certificate</code> CRs in your cluster you can use <code>kubectl</code></p>
<pre><code>kubectl get certificate -A
</code></pre>
<p>When you found the <code>Certificate</code> related to the domain you want to delete, simply delete it</p>
<pre><code>kubectl -n &lt;namespace&gt; delete certificate &lt;certificate name&gt;
</code></pre>
<p>Once you deleted the certificate CR, you might also want to delete the <code>Secret</code> containing the TLS cert one more time. This time <code>cert-manager</code> will not recreate it.</p>
