Cert-Manager Configuration

1: Cert-Manager
2: v1.9.1
3: v1.14.5
4: v1.15.3

The cert-manager package adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates.

Best Practice

Any supported EKS Anywhere curated package should be modified through package yaml files (with kind: Package) and applied through the command kubectl apply -f packageFileName. Modifying objects outside of package yaml files may lead to unpredictable behaviors.

For automatic namespace (targetNamespace) creation, see createNamespace field: PackagebundleController.spec

Configuration options for Cert-Manager

1 - Cert-Manager

Install/update/upgrade/uninstall Cert-Manager

If you have not already done so, make sure your cluster meets the package prerequisites. Be sure to refer to the troubleshooting guide in the event of a problem.

Important

Starting at eksctl anywhere version v0.12.0, packages on workload clusters are remotely managed by the management cluster.
While following this guide to install packages on a workload cluster, please make sure the kubeconfig is pointing to the management cluster that was used to create the workload cluster. The only exception is the kubectl create namespace command below, which should be run with kubeconfig pointing to the workload cluster.

Install on workload cluster

NOTE: The cert-manager package can only be installed on a workload cluster

Generate the package configuration

eksctl anywhere generate package cert-manager --cluster <cluster-name> > cert-manager.yaml

Add the desired configuration to cert-manager.yaml

Please see complete configuration options for all configuration options and their default values.

Example package file configuring a cert-manager package to run on a workload cluster.

apiVersion: packages.eks.amazonaws.com/v1alpha1
kind: Package
metadata:
  name: my-cert-manager
  namespace: eksa-packages-<cluster-name>
spec:
  packageName: cert-manager
  targetNamespace: <namespace-to-install-component>

Install Cert-Manager

eksctl anywhere create packages -f cert-manager.yaml

Validate the installation

eksctl anywhere get packages --cluster <cluster-name>

Example command output

NAME                          PACKAGE              AGE   STATE       CURRENTVERSION                                               TARGETVERSION                                                         DETAIL
my-cert-manager               cert-manager         15s   installed   1.9.1-dc0c845b5f71bea6869efccd3ca3f2dd11b5c95f               1.9.1-dc0c845b5f71bea6869efccd3ca3f2dd11b5c95f (latest)

Update

To update package configuration, update cert-manager.yaml file, and run the following command:

eksctl anywhere apply package -f cert-manager.yaml

Upgrade

Cert-Manager will automatically be upgraded when a new bundle is activated.

Uninstall

To uninstall cert-manager, simply delete the package

eksctl anywhere delete package --cluster <cluster-name> cert-manager

2 - v1.9.1

Configuring Cert-Manager in EKS Anywhere package spec

Example

apiVersion: packages.eks.amazonaws.com/v1alpha1
kind: Package
metadata:
  name: my-cert-manager
  namespace: eksa-packages-<cluster-name>
spec:
  packageName: cert-manager
  config: | 
    global:
        logLevel: 4

The following table lists the configurable parameters of the cert-manager package spec and the default values.

Parameter	Description	Default
General
`namespace`	The namespace to use for installing cert-manager package	`cert-manager`
`imagePullPolicy`	The image pull policy	`IfNotPresent`
global
`global.logLevel`	The log level: integer from 0-6	`2`
Webhook
`webhook.timeoutSeconds`	The time in seconds to wait for the webhook to connect with the kube-api server	`0`

3 - v1.14.5

Configuring Cert-Manager in EKS Anywhere package spec

Example

apiVersion: packages.eks.amazonaws.com/v1alpha1
kind: Package
metadata:
  name: my-cert-manager
  namespace: eksa-packages-<cluster-name>
spec:
  packageName: cert-manager
  config: | 
    global:
        logLevel: 4

The following table lists the configurable parameters of the cert-manager package spec and the default values.

Parameter	Description	Default
General
`namespace`	The namespace to use for installing cert-manager package	`cert-manager`
`imagePullPolicy`	The image pull policy	`IfNotPresent`
global
`global.logLevel`	The log level: integer from 0-6	`2`
Webhook
`webhook.timeoutSeconds`	The time in seconds to wait for the webhook to connect with the kube-api server	`0`

4 - v1.15.3

Configuring Cert-Manager in EKS Anywhere package spec

Example

apiVersion: packages.eks.amazonaws.com/v1alpha1
kind: Package
metadata:
  name: my-cert-manager
  namespace: eksa-packages-<cluster-name>
spec:
  packageName: cert-manager
  config: |
    global:
        logLevel: 4

The following table lists the configurable parameters of the cert-manager package spec and the default values.

Parameter	Description	Default
General
`namespace`	The namespace to use for installing cert-manager package	`cert-manager`
`imagePullPolicy`	The image pull policy	`IfNotPresent`
global
`global.logLevel`	The log level: integer from 0-6	`2`
Webhook
`webhook.timeoutSeconds`	The time in seconds to wait for the webhook to connect with the kube-api server	`0`