All Posts

Certificate governance without the ceremony: cert-manager + Venafi on k3s

December 2022 — because PKI shouldn’t require a JIRA ticket and three approvals

There’s a version of certificate management that lives in large enterprises. You file a request. A team reviews it. Someone checks a compliance box. Five days later, a certificate lands in your inbox as a .pfx file. You paste it into a UI. Two weeks from now it expires and nobody notices until a monitoring alert fires at 2am.