helm install cert-manager

1 개요[ | ]

helm install cert-manager

helm repo add jetstack https://charts.jetstack.io
helm repo update

kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.12.0/cert-manager.crds.yaml
kubectl create ns cert-manager
helm install cert-manager jetstack/cert-manager -n cert-manager

root@wsl:~# helm repo add jetstack https://charts.jetstack.io
"jetstack" has been added to your repositories

root@wsl:~# helm repo update
Hang tight while we grab the latest from your chart repositories...
...Successfully got an update from the "jetstack" chart repository
Update Complete. ⎈Happy Helming!⎈

root@wsl:~# kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.12.0/cert-manager.crds.yaml
customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/challenges.acme.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/clusterissuers.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/issuers.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/orders.acme.cert-manager.io created

root@wsl:~# kubectl get crd  | grep cert-manager
certificaterequests.cert-manager.io                   2023-05-28T14:38:17Z
certificates.cert-manager.io                          2023-05-28T14:38:17Z
challenges.acme.cert-manager.io                       2023-05-28T14:38:17Z
clusterissuers.cert-manager.io                        2023-05-28T14:38:17Z
issuers.cert-manager.io                               2023-05-28T14:38:17Z
orders.acme.cert-manager.io                           2023-05-28T14:38:18Z

root@wsl:~# kubectl api-resources | grep cert-manager
challenges                                         acme.cert-manager.io/v1                    true         Challenge
orders                                             acme.cert-manager.io/v1                    true         Order
certificaterequests                cr,crs          cert-manager.io/v1                         true         CertificateRequest
certificates                       cert,certs      cert-manager.io/v1                         true         Certificate
clusterissuers                                     cert-manager.io/v1                         false        ClusterIssuer
issuers                                            cert-manager.io/v1                         true         Issuer

root@wsl:~# kubectl create ns cert-manager
namespace/cert-manager created

root@wsl:~# helm install cert-manager jetstack/cert-manager -n cert-manager
NAME: cert-manager
LAST DEPLOYED: Sun May 28 13:22:04 2023
NAMESPACE: cert-manager
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
cert-manager v1.12.1 has been deployed successfully!

In order to begin issuing certificates, you will need to set up a ClusterIssuer
or Issuer resource (for example, by creating a 'letsencrypt-staging' issuer).

More information on the different types of issuers and how to configure them
can be found in our documentation:

https://cert-manager.io/docs/configuration/

For information on how to configure cert-manager to automatically provision
Certificates for Ingress resources, take a look at the `ingress-shim`
documentation:

https://cert-manager.io/docs/usage/ingress/

root@wsl:~# kubectl get pod -A -l helm.sh/chart=cert-manager-v1.12.1
NAMESPACE      NAME                                       READY   STATUS    RESTARTS   AGE
cert-manager   cert-manager-6657f84dc9-r5mf5              1/1     Running   0          8m8s
cert-manager   cert-manager-cainjector-5c4f45554d-82fdv   1/1     Running   0          8m8s
cert-manager   cert-manager-webhook-584887c798-clgtq      1/1     Running   0          8m8s

root@wsl:~# kubectl get all -A | grep cert-manager
cert-manager    pod/cert-manager-6657f84dc9-r5mf5                            1/1     Running     0             9m12s
cert-manager    pod/cert-manager-cainjector-5c4f45554d-82fdv                 1/1     Running     0             9m12s
cert-manager    pod/cert-manager-webhook-584887c798-clgtq                    1/1     Running     0             9m12s
cert-manager    service/cert-manager                                       ClusterIP   10.0.0.140    <none>        9402/TCP                       9m12s
cert-manager    service/cert-manager-webhook                               ClusterIP   10.0.15.188   <none>        443/TCP                        9m12s
cert-manager    deployment.apps/cert-manager                             1/1     1            1           9m12s
cert-manager    deployment.apps/cert-manager-cainjector                  1/1     1            1           9m12s
cert-manager    deployment.apps/cert-manager-webhook                     1/1     1            1           9m12s
cert-manager    replicaset.apps/cert-manager-6657f84dc9                             1         1         1       9m12s
cert-manager    replicaset.apps/cert-manager-cainjector-5c4f45554d                  1         1         1       9m12s
cert-manager    replicaset.apps/cert-manager-webhook-584887c798                     1         1         1       9m12s

root@wsl:~# kubectl get clusterrole,clusterrolebinding | grep cert-manager
clusterrole.rbac.authorization.k8s.io/cert-manager-cainjector                                                2023-05-28T13:22:10Z
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io                        2023-05-28T13:22:10Z
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-certificates                                   2023-05-28T13:22:10Z
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests                     2023-05-28T13:22:10Z
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-challenges                                     2023-05-28T13:22:10Z
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers                                 2023-05-28T13:22:10Z
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim                                   2023-05-28T13:22:10Z
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-issuers                                        2023-05-28T13:22:10Z
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-orders                                         2023-05-28T13:22:10Z
clusterrole.rbac.authorization.k8s.io/cert-manager-edit                                                      2023-05-28T13:22:10Z
clusterrole.rbac.authorization.k8s.io/cert-manager-view                                                      2023-05-28T13:22:10Z
clusterrole.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews                              2023-05-28T13:22:10Z
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-cainjector                                ClusterRole/cert-manager-cainjector                                10m
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io        ClusterRole/cert-manager-controller-approve:cert-manager-io        10m
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-certificates                   ClusterRole/cert-manager-controller-certificates                   10m
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests     ClusterRole/cert-manager-controller-certificatesigningrequests     10m
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-challenges                     ClusterRole/cert-manager-controller-challenges                     10m
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers                 ClusterRole/cert-manager-controller-clusterissuers                 10m
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim                   ClusterRole/cert-manager-controller-ingress-shim                   10m
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-issuers                        ClusterRole/cert-manager-controller-issuers                        10m
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-orders                         ClusterRole/cert-manager-controller-orders                         10m
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews              ClusterRole/cert-manager-webhook:subjectaccessreviews              10m

root@wsl:~# kubectl get Issuers,ClusterIssuers,Certificates,CertificateRequests,Orders,Challenges -A
No resources found

2 같이 보기[ | ]

3 참고[ | ]