Step 2: Install cert-manager

This step explains how to download and install cert-manager, required for Apigee hybrid to operate.

Install cert-manager

  1. Use the following command to install cert-manager v1.7.2 from GitHub.
    kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.7.2/cert-manager.yaml

    You should see a response that the cert-manager namespace and several cert-manager resources have been created. For example:

    customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io configured
    customresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io configured
    ...
    mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
    validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
    
  2. Verify that cert-manager installed correctly with the kubectl get pods command:
    kubectl get pods -n cert-manager
    
    NAME                                       READY   STATUS    RESTARTS   AGE
    cert-manager-86c986667c-7tqgv              1/1     Running   0          2d21h
    cert-manager-cainjector-74ccd955db-sb6ls   1/1     Running   0          2d21h
    cert-manager-webhook-7cbb85cfb7-z9kwq      1/1     Running   0          2d21h

Summary

You now have cert-manager installed, and you are ready to install the ASM to provide the Istio ingress function connectivity for your hybrid runtime plane.

1 2 (NEXT) Step 3: Install ASM 4 5 6 7 8 9