cert-manager
5.9#12 in public key infrastructure softwareFree planFree planAPILinuxSelf-hosted
Visitcert-manager vs OpenCA PKI
OpenCA PKI
7.4#4 in public key infrastructure softwareFree planFree planWebLinuxmacOSSelf-hosted
VisitWhat both publish
| Fact | cert-manager | OpenCA PKI |
|---|---|---|
| Integrations | Satellite projects include istio-csr, approver-policy, Kubernetes CSI drivers, csi-driver-spiffe, and trust-manager. | Official dependencies and integrations include OpenLDAP, OpenSSL, Apache HTTP Server and Apache mod_ssl. |
| Purpose | cert-manager obtains X.509 certificates from public and private issuers, keeps them valid and up to date, and attempts renewal before expiry. | OpenCA PKI is an open source, out-of-the-box Certification Authority for setting up and managing a PKI. |
cert-manager plans
- Open source cert-managerFree
OpenCA PKI plans
- OpenCA PKIFree
Pick cert-manager if…
cert-manager suits teams running Kubernetes or OpenShift workloads that need certificates for public-facing or internal services. It is relevant to operators seeking automated issuance and renewal, including for Ingress TLS or pod-to-pod mTLS.
Pick OpenCA PKI if…
It suits organizations that need to run their own certificate authority and PKI on Linux, macOS, or a self-hosted web setup. Teams should be prepared to install its named prerequisites and work with limited, partly outdated documentation.