Who manages SSL certificates?
cert-manager runs in the cluster and handles certificate issuance and renewal automatically. Certificates are renewed before expiry with no manual intervention required. There is no risk of surprise certificate expiry causing downtime.