Kubernetes cert-manager

wikipedia:Cert-manager X.509 certificate management for Kubernetes and OpenShift.

• https://cert-manager.io/

helm repo add jetstack https://charts.jetstack.io && helm repo update
helm install cert-manager
kubectl apply -f ./certbot-issuers.yaml

• kubectl get issuer

• kubectl get certificates

kubectl describe certificaterequest
k describe issuer -A
k describe certificate -A

kubectl describe challenge -A

kubectl describe order -A

k describe service cm-acme-http-solver-m5l52 -n grafana

k describe order -A

• kubectl describe csr,cert,issuer,cr -A
• kubectl log

• kind: Certificate, kind: ClusterIssuer

Errors

│ Warning: Helm release "cert-manager" was created but has a failed status. Use the `helm` command to investigate the error, correct it, then run Terraform again.

  controller.go .../... error="Operation cannot be fulfilled on certificaterequests.cert-manager.io .../... the object has been modified; please apply your changes to the latest version and try again

remote error: tls: unrecognized name

Related

• Issuer
• Venafi
• Jetstack
• https://artifacthub.io/packages/helm/cert-manager/cert-manager
• API reference: https://cert-manager.io/docs/reference/api-docs/#acme.cert-manager.io/v1.ACMEChallengeSolverHTTP01IngressPodSpec
• kubectl get apiservices
• Cert-manager CRDs
• kube-root-ca.crt

See also

• certificates.k8s.io
• cert-manager.io [ /issuer | /cluster-issuer ] [ issuer. | certificaterequests. | challenges. ] kind: Issuer, kind: ClusterIssuer
• cert-manager, cert-manager-controller, ingress-shim, kind: Certificate, kind: ClusterIssuer, Kind: CertificateSigningRequest, kind: Issuer, kubectl [ get | describe ] certificates, cmctl, kubectl get issuer, kubectl get csr, IngressShim
• Kubernetes cert-manager, kube-root-ca.crt