Hacker News Reader

Vault from Hashicorp (and its competitors) is probably better suited for what you ask

thank you for sharing, I will look into this, much appreciated!

Cert manager [1] also automatically provisions and rotates TLS certificates.

Citadel does this only for internal certa. It does not provision lets encrypt (at least didn’t several months ago)

thank you for sharing, I will look into this, much appreciated!

It basically automatically issues certificates to pods so they can use mTLS seamlessly when they communicate with each other. More of authentication/authorization piece.

Citadel does as you say specifically for secure communication between services (i.e., mTLS).