Chapter 3. Using certificate manager on a MicroShift node

Procedure

1. Install the cert-manager-operator using the microshift-cert-manager RPM by running the following command:

   $ sudo dnf install microshift-cert-manager

2. Verify the certificate manager versions that are used by running the following command:

   $ rpm -qi microshift-cert-manager

3. Restart MicroShift by running the following command:

   $ systemctl microshift restart

4. Verify that the microshift-cert-manager RPM is installed by running the following command:

   $ oc get deployment -n  cert-manager-operator

   Example output

   NAME                                       READY   UP-TO-DATE   AVAILABLE   AGE
   cert-manager-operator-controller-manager   1/1     1            1           2d22h

5. Verify that the`cert-manager` deployments are in a ready state and are up-to-date in the cert-manager namespace by running the following command:

   $ oc get deployment -n cert-manager

   Example output

   NAME                      READY   UP-TO-DATE   AVAILABLE   AGE
   cert-manager              1/1     1            1           2d22h
   cert-manager-cainjector   1/1     1            1           2d22h
   cert-manager-webhook      1/1     1            1           2d22h

6. Verify that the pods are running in the cert-manager namespace by running the following command:

   $ oc get pods -n cert-manager

   Example output

   NAME                                       READY   STATUS    RESTARTS   AGE
   cert-manager-7cfb4fbb84-qdmk8              1/1     Running   2          2d22h
   cert-manager-cainjector-854f669657-xzs8b   1/1     Running   2          2d22h
   cert-manager-webhook-68fd6d5f5c-j942h      1/1     Running   2          2d22h