[pahae]

Nebula is fantastic, absolute love it. We use it in production. Cert management can be a bit of a pain on a large scale but there's an excellent Terraform provider [0] that can help. Coupled with the Terraform ansible provider and a little bit of scripting you can automate anything related to cert provisioning and renewal.

[0] https://registry.terraform.io/providers/TelkomIndonesia/nebu...

[SadTrombone]

The Nebula creators actually started their own company after leaving Slack focusing on handling your mentioned pain points with cert management and orchestration: defined.net