---
title: "Discussion on \"Cert-Manager DNS Challenge with Cloudflare on Kubernetes\" | Hashnode"
description: "Discussion on \"Cert-Manager DNS Challenge with Cloudflare on Kubernetes\". In this tutorial, we will be issuing Let's Encrypt certificates using cert-manager on Kubernetes and we will be using the DNS Challenge with Cloudflare.\nThe reason I am using DNS Challenge instead of HTTP Challenge is because the Kubernetes environme..."
url: "https://hashnode.com/posts/cert-manager-dns-challenge-with-cloudflare-on-kubernetes/65380bb2d80730186faafc4b"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Cert-Manager DNS Challenge with Cloudflare on Kubernetes](https://ruanbekker.hashnode.dev/cert-manager-dns-challenge-with-cloudflare-on-kubernetes?utm_source=hashnode&utm_medium=feed)

In this tutorial, we will be issuing Let's Encrypt certificates using cert-manager on Kubernetes and we will be using the DNS Challenge with Cloudflare. The reason I am using DNS Challenge instead of HTTP Challenge is because the Kubernetes environme...

Oct 24, 2023 · 6 min read · ruanbekker.hashnode.dev  
Updated Oct 26, 2023  
Read the article

-   [#kubernetes](https://hashnode.com/tag/kubernetes)
-   [#letsencrypt](https://hashnode.com/tag/letsencrypt)
-   [#nginx](https://hashnode.com/tag/nginx)
-   [#devops](https://hashnode.com/tag/devops)
-   [#cloudflare](https://hashnode.com/tag/cloudflare)

## Written by

[Ruan Bekker](https://hashnode.com/@ruanbekker)

@ruanbekker · South Africa

  
[View profile](https://hashnode.com/@ruanbekker)

DevOps Engineer | Cloud Evangelist

I have a passion for problem solving, building things and making businesses succeed. I’m madly curious by heart, so I’m very hungry for knowledge and you will always find my trying and testing out new things to stay ahead of the game.

## Responses 1

Markdown supported · ⌘↵ to post

[mab](https://hashnode.com/@celcin)

[Oct 25, 2023](https://hashnode.com/posts/cert-manager-dns-challenge-with-cloudflare-on-kubernetes/65380bb2d80730186faafc4b/comment/653975408a6f01795363debb)

Hey, thanks for the article, awesome. Where does the IP 10.5.24.245 come from? And why does it require a second dns entry with \*.app.example.com?

[Ruan Bekker](https://hashnode.com/@ruanbekker)

[Oct 26, 2023](https://hashnode.com/posts/cert-manager-dns-challenge-with-cloudflare-on-kubernetes/65380bb2d80730186faafc4b/comment/653975408a6f01795363debb#reply-653a1edae641417b5eeeb165)

Hey [mab](https://hashnode.com/@celcin), oh I see that seems a bit confusing. I have updated the post to explain it a bit more. The IP is the LoadBalancer IP and its not needed to create a second DNS entry, but I have explained it in the post. Let me know if anything is unclear. :)