I asked a couple of the members of the cert-manager team why they use inlets for local/private Kubernetes Ingress. The answer: it just works and was the easiest option.

I wrote up how it works and new options with helm for short-lived clusters.