2022-08-16 09:40:54 +00:00
|
|
|
# cert-manager
|
|
|
|
|
|
|
|
|
|
`cert-manager` is used to obtain TLS certificates from Let's Encrypt.
|
|
|
|
|
|
|
|
|
|
Added manifest with:
|
|
|
|
|
|
|
|
|
|
```
|
2024-07-28 07:37:34 +00:00
|
|
|
curl -L https://github.com/jetstack/cert-manager/releases/download/v1.15.1/cert-manager.yaml -O
|
2022-08-16 09:40:54 +00:00
|
|
|
```
|
|
|
|
|
|
|
|
|
|
To update certificate issuer
|
|
|
|
|
|
|
|
|
|
```
|
2024-07-28 07:37:34 +00:00
|
|
|
kubectl apply -f cert-manager.yaml
|
2022-08-16 09:40:54 +00:00
|
|
|
kubectl apply -f issuer.yml
|
|
|
|
|
kubectl -n cert-manager create secret generic tsig-secret \
|
|
|
|
|
--from-literal=TSIG_SECRET=<secret>
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Workaround for webhook timeout issue https://github.com/jetstack/cert-manager/issues/2602
|
|
|
|
|
It's not very clear why this is happening, deserves further investigation - presumably Calico related somehow:
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
kubectl delete mutatingwebhookconfiguration.admissionregistration.k8s.io cert-manager-webhook
|
|
|
|
|
kubectl delete validatingwebhookconfigurations.admissionregistration.k8s.io cert-manager-webhook
|
|
|
|
|
```
|
