Overview
This document outlines the steps necessary to be taken to integrate ILM with the cert-manager czertainly-issuer.
czertainly-issuer nameThe issuer component, its Helm chart, its API group czertainly-issuer.czertainly.com and its CzertainlyIssuer/CzertainlyClusterIssuer resource kinds still carry their original names in current releases, so this guide uses them verbatim. Type them exactly as shown — these are live Kubernetes identifiers, and substituting the ILM name makes the commands and resources on the following pages fail.
This integration guide was tested with:
- Kubernetes 1.19+
- cert-manager 1.7.0+
cert-manager
cert-manager is a Kubernetes add-on to automate the management and issuance of TLS certificates from various issuing sources. It will ensure certificates are valid and up to date periodically, and attempt to renew certificates at an appropriate time before expiry.
cert-manager Issuer
The cert-manager issuer is a custom resource definition (CRD) that allows you to issue certificates from the ILM platform using the cert-manager interface.
Integration
The following steps should be done to successfully integrate with cert-manager:
| # | Reference | Short description |
|---|---|---|
| 1 | Install the cert-manager issuer | Install the cert-manager issuer controller in the Kubernetes cluster |
| 2 | Create the issuer resource | Create the issuer resource |
| 3 | Create Certificate | Create a certificate using the issuer |
Useful resources
The following resources can be useful when integrating with cert-manager:
| Resource | Description |
|---|---|
| cert-manager | cert-manager project website |
| cert-manager installation guide | cert-manager installation guide |
| cert-manager Certificate resource | cert-manager Certificate resource guide |
| cert-manager issuer repository | cert-manager issuer repository |
| cert-manager issuer Helm chart | cert-manager issuer Helm chart repository |