How To Install or Upgrade Cert Manager

Background

RealTheory can notify you if Cert Manager is a required component in your environment that is not present on your cluster or if the version of Cert Manager that is installed is not in compliance with organizational standards.

Solution - Installation

If Cert Manager is a required component in your Kubernetes environment, it is most likely that the Helm Chart or the manifest file needed for the installation already exist. Contact your Operations or DevOps team to determine if there are company resources for installing Cert Manager BEFORE using either of the following procedures.

Procedure Using HELM Chart Package Manager

To install Cert Manager:

1. Use the Helm Installation Guide to install Helm (if not already installed).

2. Use the following commands to add the Jetstack Helm chart repository:

   helm repo add jetstack https://charts.jetstack.io

   helm repo update

3. Create a namespace for Cert Manager.

   Example:

   kubectl create namespace cert-manager

4. Do one of the following:

   • To install the latest version, use the following command:

     helm install cert-manager jetstack/cert-manager --namespace cert-manager

   • To install a specific version, use the following command:

     helm install cert-manager jetstack/cert-manager --namespace cert-manager --version <version>

     where <version> is the version number of Cert Manager you want to install.

5. Verify the Cert Manager pods are running:

   kubectl get pods -n cert-manager

   You should see Cert Manager-related pods running.

Procedure Using the YAML Manifest

To install Cert Manager:

1. Apply the latest Cert Manager manifests:

   kubectl apply -f https://github.com/jetstack/cert-manager/releases/latest/download/cert-manager.yaml

2. Verify the Cert Manager pods are running:

   kubectl get pods -n <namespace>

   where <namespace> is the namespace where Cert Manager was installed.

   You should see Cert Manager-related pods running.

Solution - Upgrade

If a specific version of Cert Manager is required in your Kubernetes environment, it is most likely that the Helm Chart or the manifest file already exist. Contact your Operations or DevOps team to determine if there are company resources for upgrading Cert Manager BEFORE using either of the following procedures.

Procedure Using HELM Chart Package Manager

To upgrade Cert Manager:

1. Use the Helm Installation Guide to install Helm (if not already installed).

2. Do one of the following:

   • To upgrade to the latest version, use the following command:

     helm upgrade <release-name> jetstack/cert-manager --namespace cert-manager

     where <release-name> is the name of the Cert Manager release

   • To upgrade to a specific version, use the following command:

     helm upgrade <release-name> jetstack/cert-manager --namespace cert-manager --version <version>

     where <release-name> is the name of the Cert Manager release and <version> is the version number of Cert Manager you want to upgrade to.

3. Verify the Cert Manager pods are running and have been updated:

   kubectl get pods -n cert-manager

   You should see Cert Manager-related pods running.

Procedure Using YAML Manifest

To upgrade Cert Manager:

1. Apply the appropriate manifests:

   kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/<version>/cert-manager.yaml

   where <version> is the version number of Cert Manager you want to upgrade to.

2. Verify the Cert Manager pods are running and have been updated:

   kubectl get pods -n <namespace>

   where <namespace> is the namespace where Cert Manager is installed.

   You should see Cert Manager-related pods running.