Step 2: Install cert-manager

You are currently viewing version 1.7 of the Apigee hybrid documentation. This version is end of life. You should upgrade to a newer version. For more information, see Supported versions.

Version 1.7 (unsupported)

   Supported versions:

• v1.12 (latest)                        
• v1.11                         
• v1.10                                        
• List of supported versions

   Unsupported versions:

• v1.9                                         
• v1.8                                         
• v1.7                                         
• v1.6                                         
• v1.5                                         
• v1.4                                         
• v1.3                                         
• v1.2                                         
• v1.1                                         

This step explains how to download and install cert-manager, required for Apigee hybrid to operate.

Important: You do not need to do this step if you are performing a fresh installation on a supported Anthos platform. Anthos (versions 1.8.2 and later) comes with its own version of cert-manager. Apigee can use this Anthos version of cert-manager as long as it is installed in the cert-manager namespace (which is the default namespace).

If for certain reasons, you need to use your own cert-manager, follow the steps described in Conflicting cert-manager installation before continuing.

Install cert-manager

1. Use the following command to install cert-manager v1.7.2 from GitHub.

   kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.7.2/cert-manager.yaml

   You should see a response that the cert-manager namespace and several cert-manager resources have been created. For example:

   customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io configured
   customresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io configured
   ...
   mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
   validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
   

2. Verify that cert-manager installed correctly with the kubectl get pods command:

   kubectl get pods -n cert-manager
   

   NAME                                       READY   STATUS    RESTARTS   AGE
   cert-manager-86c986667c-7tqgv              1/1     Running   0          2d21h
   cert-manager-cainjector-74ccd955db-sb6ls   1/1     Running   0          2d21h
   cert-manager-webhook-7cbb85cfb7-z9kwq      1/1     Running   0          2d21h

Summary

You now have cert-manager installed, and you are ready to install the ASM to provide the Istio ingress function connectivity for your hybrid runtime plane.

1 2 (NEXT) Step 3: Install ASM 4 5 6 7 8 9