<p>From the <code>cert-manager</code> doc: adding the annotation <code>cert-manager.io/cluster-issuer: acme-issuer</code> to an <code>Ingress</code> object should trigger the shim, request a certificate to this issuer, and store the certificate (without any namespace ?) (with which name?).</p>

<p>I tried this and it does nothing. Adding a <code>tls:</code> section to the yaml definition of the <code>Ingress</code> does trigger the shim, request a certificate and store it in the same namespace as the <code>Ingress</code>.</p>

<p>This means the doc is incorrect, or should it really work without a <code>tls:</code> section ?</p>

<pre><code>apiVersion: cert-manager.io/v1alpha2
kind: ClusterIssuer
metadata:
  name: acme-issuer
spec:
  acme:
    email: user@example.com
    server: https://acme-staging-v02.api.letsencrypt.org/directory
    privateKeySecretRef:
      name: example-issuer-account-key
    solvers:
    - http01:
        ingress:
          class: nginx
</code></pre>

<pre><code>apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  annotations:
    cert-manager.io/cluster-issuer: acme-issuer
    kubernetes.io/ingress.class: nginx
  name: my-ingress-name
  namespace: mynamespace
spec:
  rules:
  - host: some.domain.eu
    http:
      paths:
      - backend:
          serviceName: my-service-name
          servicePort: 5000
        path: /
  tls:
  - hosts:
    - some.domain.eu
    secretName: secret-storage-key-for-tls-cert
</code></pre>

Softlion
<p>If you created the issuer correctly, then you need to create a Certificate, so the issuer can issue the certificate using the information you have in the Certificate resource, and populate the secret:</p>

<pre><code>apiVersion: cert-manager.io/v1alpha2
kind: Certificate
metadata:
  name: certname
spec:
  secretName: secretName
  issuerRef:
    name: letsencrypt-prod
  commonName: &lt;the CN&gt;
  dnsNames:
  - &lt;name&gt;

</code></pre>

<p>Once you have this resource, it should create a secret containing the TLS certificates, and store it in <code>secretName</code>.</p>
