Comment by nijave

On k8s, there's cert-manager but also you need k8s...

Most browsers support trust on first use for leaf certs