Homelab // Docs

Cert Manager creates TLS certificates for workloads in the cluster and renews certificates before they expire. Read more.

Install Cert Manager using Helm:

helm repo add jetstack https://charts.jetstack.io
helm repo update

helm install \
  cert-manager jetstack/cert-manager \
  --namespace cert-manager \
  --create-namespace \
  --version v1.18.2 \
  --set installCRDs=true

Test the Cert Manager installation

Create test-cm.yaml

apiVersion: v1
kind: Namespace
metadata:
  name: cert-manager-test
---
apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  name: test-selfsigned
  namespace: cert-manager-test
spec:
  selfSigned: {}
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: selfsigned-cert
  namespace: cert-manager-test
spec:
  dnsNames:
    - example.com
  secretName: selfsigned-cert-tls
  issuerRef:
    name: test-selfsigned

Apply, verify, then delete this config.

kubectl apply -f test-cm.yaml
kubectl describe certificate -n cert-manager-test
kubectl delete -f test-cm.yaml