How to use Certificate Manager certificates in load balancers or in Managed Service for Kubernetes
Written by
Updated at December 17, 2025
Case description
- You want to use a certificate from Certificate Manager for an app running in a Managed Service for Kubernetes cluster.
- You need to get a certificate from Certificate Manager and load it into Managed Service for Kubernetes.
Solution
Certificates from Certificate Manager are not automatically loaded into applications running in Managed Service for Kubernetes clusters, Application Load Balancer, or Network Load Balancer.
To get the certificate chain file in PEM format once, use the following command:
yc certificate-manager certificate content --id <CERTIFICATE_ID> --chain CERT_FILE_NAME_HERE.PEM
This option does not provide automatic certificate updates in the web application when the certificate is re-issued. If you need the certificate automatically re-issued and loaded into your application, follow this tutorial that explains how to install a NGINX ingress controller with a certificate from Certificate Manager.
If nothing helped
If the above actions did not help, create a support ticket. Provide the following information in your ticket:
- Certificate ID in Certificate Manager.
- Managed Service for Kubernetes cluster, Application Load Balancer, or Network Load Balancer ID.
- Description of what you expect to get.