README.md

Cert Manager (cert-manager)

Keywords: X.509 Certificate Controller

Links

• Code Repository
• Main Website

Docs

• Supported Annotations
• Securing NGINX-ingress
• Troubleshooting Issuing ACME Certificates
• Kubernetes CertificateSigningRequests

Issuers

• Amazon Web Services (AWS)
• Azure
• Cloudflare
• Google Cloud Platform (GCP)
• Let's Encrypt

CLI

Links

• Docs

Installation

Homebrew

brew install cmctl

Linux Binary

CMCTL_VERSION="$(curl -s https://api.github.com/repos/cert-manager/cert-manager/releases/latest | grep tag_name | cut -d '"' -f 4 | tr -d 'v')"; \
  curl -L \
    "https://github.com/cert-manager/cert-manager/releases/download/v${CMCTL_VERSION}/cmctl-linux-amd64.tar.gz" | \
      tar -xzC /usr/local/bin cmctl

Commands

cmctl -h

Usage

#
cmctl status

Lens (Non-official)

Installation

1. Lens -> Extensions
2. Copy TGZ URL Address of latest version
3. Extensions -> Paste in the Field URL -> Install

Helm

References

• Helm Charts

Dependencies

• NGINX Ingress Controller

Repository

helm repo add jetstack 'https://charts.jetstack.io'
helm repo update

Install

#
kubectl create ns cert-system && kubens cert-system

#
helm search repo -l jetstack/cert-manager

#
helm install cert-manager jetstack/cert-manager \
  --version v1.13.2 \
  -f <(cat << EOF
installCRDs: true

ingressShim:
  defaultIssuerKind: ClusterIssuer
  defaultIssuerName: letsencrypt-issuer

prometheus:
  enabled: false
EOF
)

#
kubectl get all

Status

kubectl rollout status deploy/cert-manager

Usage

First, add an issuer.

#
kubectl get clusterissuer -o json | jq -r '.items[].metadata.name'

Logs

#
kubectl logs \
  -l 'app.kubernetes.io/component=controller' \
  -f

#
kubectl logs \
  -l 'app.kubernetes.io/component=cainjector' \
  -f

#
kubectl logs \
  -l 'app.kubernetes.io/component=webhook' \
  -f

Delete

helm uninstall cert-manager \
  -n cert-system

kubectl delete ns cert-system \
  --grace-period=0 \
  --force