creates Cert resource
if no cert
discovered in secrets
testing the challenge
Let's Encrypt
challenge to
prove domain ownership
validating challenge
passes challenge
signed cert from
Let's Encrypt
certificate ready to use
Ingress
created
External DNS
creates records
cert-manager
Cert
Order
Challenge
Let's Encrypt