Skip to content

Setting up Cert-Manager

The Platformer Console uses Jetstack Cert-Manager to create and rotate SSL/TLS certificates for your internet-facing applications and workloads.

Before you begin

Using Platformer Shell

  1. Access Kubectl Shell from the Console
  2. Run the following commands

    helm repo add jetstack https://charts.jetstack.io

    kubectl create namespace cert-manager
    
    helm install \
    cert-manager jetstack/cert-manager \
    --namespace cert-manager \
    --version v0.16.0 \
    --set installCRDs=true
    

  3. Create a the following ClusterIssuer resource using kubectl apply -f <filename>.

    apiVersion: cert-manager.io/v1alpha3
    kind: ClusterIssuer
    metadata:
      name: letsencrypt-prod
    spec:
      acme:
        # update email
        email: <Your support email>
        privateKeySecretRef:
          name: letsencrypt-prod
        server: https://acme-v02.api.letsencrypt.org/directory
        solvers:
        - http01:
            ingress:
              # update ingress class based on which ingress controller you installed
              class: nginx
    

    Hint

    With Cert manager you can do wildcard and dns ssl certificates as well. Please refer Official Documentation

Manual Installation

Install cert-manager on your Cluster by following the instructions here: Cert Manager Installation Guide