--- title: "Private CA Issuer" slug: "k8s-k8suse-ncloud-pca-issuer" updated: 2026-09-17T09:33:15Z published: 2026-09-17T09:33:15Z canonical: "guide.ncloud-docs.com/k8s-k8suse-ncloud-pca-issuer" --- > ## Documentation Index > Fetch the complete documentation index at: https://guide.ncloud-docs.com/llms.txt > Use this file to discover all available pages before exploring further. # Private CA Issuer #### cert-manager You can use [cert-manager](https://cert-manager.io/) to manage TLS certificate life cycle in Kubernetes Cluster. The cert-manager is a resource type of Kubernetes cluster. It adds certificates and certificate issuers, and simplifies the process of obtaining, renewing, and using those certificates. Note For more information on using TLS certificates registered in [Certificate Manager](/docs/en/security-security-15-1), see [Set ALB Ingress Controller](/docs/en/k8s-k8suse-albingress). #### Private CA Issuer The cert-manager can issue certificates from a various support sources, and offers open source plugins for [Private CA](/docs/en/privateca-overview) of the Naver Cloud Platform. With the [ncloud-pca-issuer](https://github.com/NaverCloudPlatform/ncloud-pca-issuer), you can use the Private CA of cert-manager as an External Issuer. #### Example of application of issued certificate - Applying to Ingress : Communication between Load Balancer and Ingress Controller is encrypted, and then the data is not encrypted and forwarded to the resource of cluster. - Applying to pod : Communication to Pod are encrypted, and you can apply TLS termination in the pod. - mTLS between pods : You can apply certificates for encryption of cluster’s internal communication.