Merge pull request #3464 from jtravee/Cert_Mgr_v151

Updated cert-manager installation instructions to reference newest version
This commit is contained in:
Catherine Luse
2021-08-26 12:36:23 -07:00
committed by GitHub
6 changed files with 20 additions and 44 deletions
@@ -122,21 +122,8 @@ This step is only required to use certificates issued by Rancher's generated CA
These instructions are adapted from the [official cert-manager documentation](https://cert-manager.io/docs/installation/kubernetes/#installing-with-helm). These instructions are adapted from the [official cert-manager documentation](https://cert-manager.io/docs/installation/kubernetes/#installing-with-helm).
``` ```
# Install the CustomResourceDefinition resources separately # If you have installed the CRDs manually instead of with the `--set installCRDs=true` option added to your Helm install command, you should upgrade your CRD resources before upgrading the Helm chart:
kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.0.4/cert-manager.crds.yaml kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.5.1/cert-manager.crds.yaml
# **Important:**
# If you are running Kubernetes v1.15 or below, you
# will need to add the `--validate=false` flag to your
# kubectl apply command, or else you will receive a
# validation error relating to the
# x-kubernetes-preserve-unknown-fields field in
# cert-manager’s CustomResourceDefinition resources.
# This is a benign error and occurs due to the way kubectl
# performs resource validation.
# Create the namespace for cert-manager
kubectl create namespace cert-manager
# Add the Jetstack Helm repository # Add the Jetstack Helm repository
helm repo add jetstack https://charts.jetstack.io helm repo add jetstack https://charts.jetstack.io
@@ -145,10 +132,11 @@ helm repo add jetstack https://charts.jetstack.io
helm repo update helm repo update
# Install the cert-manager Helm chart # Install the cert-manager Helm chart
helm install \ helm install cert-manager jetstack/cert-manager \
cert-manager jetstack/cert-manager \
--namespace cert-manager \ --namespace cert-manager \
--version v1.0.4 --create-namespace \
--version v1.5.1 \
--set installCRDs=true
``` ```
Once you’ve installed cert-manager, you can verify it is deployed correctly by checking the cert-manager namespace for running pods: Once you’ve installed cert-manager, you can verify it is deployed correctly by checking the cert-manager namespace for running pods:
@@ -102,7 +102,7 @@ helm repo update
Fetch the latest cert-manager chart available from the [Helm chart repository](https://hub.helm.sh/charts/jetstack/cert-manager). Fetch the latest cert-manager chart available from the [Helm chart repository](https://hub.helm.sh/charts/jetstack/cert-manager).
```plain ```plain
helm fetch jetstack/cert-manager --version v1.0.4 helm fetch jetstack/cert-manager --version v1.5.1
``` ```
### 3. Render the cert-manager template ### 3. Render the cert-manager template
@@ -110,7 +110,7 @@ helm fetch jetstack/cert-manager --version v1.0.4
Render the cert-manager template with the options you would like to use to install the chart. Remember to set the `image.repository` option to pull the image from your private registry. This will create a `cert-manager` directory with the Kubernetes manifest files. Render the cert-manager template with the options you would like to use to install the chart. Remember to set the `image.repository` option to pull the image from your private registry. This will create a `cert-manager` directory with the Kubernetes manifest files.
```plain ```plain
helm template cert-manager ./cert-manager-v1.0.4.tgz --output-dir . \ helm template cert-manager ./cert-manager-v1.5.1.tgz --output-dir . \
--namespace cert-manager \ --namespace cert-manager \
--set image.repository=<REGISTRY.YOURDOMAIN.COM:PORT>/quay.io/jetstack/cert-manager-controller \ --set image.repository=<REGISTRY.YOURDOMAIN.COM:PORT>/quay.io/jetstack/cert-manager-controller \
--set webhook.image.repository=<REGISTRY.YOURDOMAIN.COM:PORT>/quay.io/jetstack/cert-manager-webhook \ --set webhook.image.repository=<REGISTRY.YOURDOMAIN.COM:PORT>/quay.io/jetstack/cert-manager-webhook \
@@ -121,7 +121,7 @@ helm template cert-manager ./cert-manager-v1.0.4.tgz --output-dir . \
Download the required CRD file for cert-manager: Download the required CRD file for cert-manager:
```plain ```plain
curl -L -o cert-manager/cert-manager-crd.yaml https://github.com/jetstack/cert-manager/releases/download/v1.0.4/cert-manager.crds.yaml curl -L -o cert-manager/cert-manager-crd.yaml https://github.com/jetstack/cert-manager/releases/download/v1.5.1/cert-manager.crds.yaml
``` ```
### 5. Render the Rancher template ### 5. Render the Rancher template
@@ -64,7 +64,7 @@ In a Kubernetes Install, if you elect to use the Rancher default self-signed TLS
```plain ```plain
helm repo add jetstack https://charts.jetstack.io helm repo add jetstack https://charts.jetstack.io
helm repo update helm repo update
helm fetch jetstack/cert-manager --version v1.0.4 helm fetch jetstack/cert-manager --version v1.5.1
helm template ./cert-manager-<version>.tgz | grep -oP '(?<=image: ").*(?=")' >> ./rancher-images.txt helm template ./cert-manager-<version>.tgz | grep -oP '(?<=image: ").*(?=")' >> ./rancher-images.txt
``` ```
@@ -122,21 +122,8 @@ This step is only required to use certificates issued by Rancher's generated CA
These instructions are adapted from the [official cert-manager documentation](https://cert-manager.io/docs/installation/kubernetes/#installing-with-helm). These instructions are adapted from the [official cert-manager documentation](https://cert-manager.io/docs/installation/kubernetes/#installing-with-helm).
``` ```
# Install the CustomResourceDefinition resources separately # If you have installed the CRDs manually instead of with the `--set installCRDs=true` option added to your Helm install command, you should upgrade your CRD resources before upgrading the Helm chart:
kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.0.4/cert-manager.crds.yaml kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v1.5.1/cert-manager.crds.yaml
# **Important:**
# If you are running Kubernetes v1.15 or below, you
# will need to add the `--validate=false` flag to your
# kubectl apply command, or else you will receive a
# validation error relating to the
# x-kubernetes-preserve-unknown-fields field in
# cert-manager’s CustomResourceDefinition resources.
# This is a benign error and occurs due to the way kubectl
# performs resource validation.
# Create the namespace for cert-manager
kubectl create namespace cert-manager
# Add the Jetstack Helm repository # Add the Jetstack Helm repository
helm repo add jetstack https://charts.jetstack.io helm repo add jetstack https://charts.jetstack.io
@@ -145,10 +132,11 @@ helm repo add jetstack https://charts.jetstack.io
helm repo update helm repo update
# Install the cert-manager Helm chart # Install the cert-manager Helm chart
helm install \ helm install cert-manager jetstack/cert-manager \
cert-manager jetstack/cert-manager \
--namespace cert-manager \ --namespace cert-manager \
--version v1.0.4 --create-namespace \
--version v1.5.1 \
--set installCRDs=true
``` ```
Once you’ve installed cert-manager, you can verify it is deployed correctly by checking the cert-manager namespace for running pods: Once you’ve installed cert-manager, you can verify it is deployed correctly by checking the cert-manager namespace for running pods:
@@ -102,7 +102,7 @@ helm repo update
Fetch the latest cert-manager chart available from the [Helm chart repository](https://hub.helm.sh/charts/jetstack/cert-manager). Fetch the latest cert-manager chart available from the [Helm chart repository](https://hub.helm.sh/charts/jetstack/cert-manager).
```plain ```plain
helm fetch jetstack/cert-manager --version v1.0.4 helm fetch jetstack/cert-manager --version v1.5.1
``` ```
### 3. Render the cert-manager template ### 3. Render the cert-manager template
@@ -110,7 +110,7 @@ helm fetch jetstack/cert-manager --version v1.0.4
Render the cert-manager template with the options you would like to use to install the chart. Remember to set the `image.repository` option to pull the image from your private registry. This will create a `cert-manager` directory with the Kubernetes manifest files. Render the cert-manager template with the options you would like to use to install the chart. Remember to set the `image.repository` option to pull the image from your private registry. This will create a `cert-manager` directory with the Kubernetes manifest files.
```plain ```plain
helm template cert-manager ./cert-manager-v1.0.4.tgz --output-dir . \ helm template cert-manager ./cert-manager-v1.5.1.tgz --output-dir . \
--namespace cert-manager \ --namespace cert-manager \
--set image.repository=<REGISTRY.YOURDOMAIN.COM:PORT>/quay.io/jetstack/cert-manager-controller \ --set image.repository=<REGISTRY.YOURDOMAIN.COM:PORT>/quay.io/jetstack/cert-manager-controller \
--set webhook.image.repository=<REGISTRY.YOURDOMAIN.COM:PORT>/quay.io/jetstack/cert-manager-webhook \ --set webhook.image.repository=<REGISTRY.YOURDOMAIN.COM:PORT>/quay.io/jetstack/cert-manager-webhook \
@@ -121,7 +121,7 @@ helm template cert-manager ./cert-manager-v1.0.4.tgz --output-dir . \
Download the required CRD file for cert-manager: Download the required CRD file for cert-manager:
```plain ```plain
curl -L -o cert-manager/cert-manager-crd.yaml https://github.com/jetstack/cert-manager/releases/download/v1.0.4/cert-manager.crds.yaml curl -L -o cert-manager/cert-manager-crd.yaml https://github.com/jetstack/cert-manager/releases/download/v1.5.1/cert-manager.crds.yaml
``` ```
### 5. Render the Rancher template ### 5. Render the Rancher template
@@ -64,7 +64,7 @@ In a Kubernetes Install, if you elect to use the Rancher default self-signed TLS
```plain ```plain
helm repo add jetstack https://charts.jetstack.io helm repo add jetstack https://charts.jetstack.io
helm repo update helm repo update
helm fetch jetstack/cert-manager --version v1.0.4 helm fetch jetstack/cert-manager --version v1.5.1
helm template ./cert-manager-<version>.tgz | grep -oP '(?<=image: ").*(?=")' >> ./rancher-images.txt helm template ./cert-manager-<version>.tgz | grep -oP '(?<=image: ").*(?=")' >> ./rancher-images.txt
``` ```