Now that cert-manager 1.16 has been released, --set config.enableGatewayAPI=true is now the recommended approach for projects that show instructions on how to enable cert-manager's gateway API support, especially on visible projects like Cilium:

[maelvls]

Now that cert-manager 1.16 has been released, --set config.enableGatewayAPI=true is the recommended approach for projects that show instructions on how to enable cert-manager's gateway API support, especially on visible projects like Cilium.

Projects that use extraArgs + the deprecated --feature-gates=ExperimentalGatewayAPISupport=true feature flag:

• Cilium: https://docs.cilium.io/en/latest/network/servicemesh/tls-termination/ (source: tls-cert.rst)

Projects that use extraArgs + --enable-gateway-api instead of config.enableGatewayAPI:

• Traefik: https://github.com/traefik/traefik-helm-chart/blob/954e8ac290e1eee8661320c071aca37d8c36deb2/EXAMPLES.md?plain=1#L936
• Tetrate's Envoy Proxy: https://github.com/tetratelabs/eg-course/blob/66194c52c99c780f9606fcef7157e1c7ebda6693/docs/https.md?plain=1#L29
• ksctl: https://github.com/ksctl/ksctl/blob/34299eaf5b57aaa52960ca614a0495f8b3dee491/internal/kubernetes/components/certmanager.go#L72
• https://github.com/search?q=language%3Ayaml+cert-manager+extraArgs+enable-gateway-api&type=code&p=2

Xref:

• feat: graduate gateway-api to beta and enable by default cert-manager#6961
• add flag to enable Gateway api support in helm chart cert-manager#7121
• Gateway API: Recommend the config approach rather than extraArgs #1517

fyi @wallrj