이 콘텐츠는 선택한 언어로 제공되지 않습니다.
Chapter 3. Using certificate manager on a MicroShift node
The MicroShift certificate manager supports managing TLS certificates. This integration results in the issue, renewal, and management of certificate from certificate authorities.
3.1. MicroShift certificate manager functions 링크 복사링크가 클립보드에 복사되었습니다!
With MicroShift certificate manager, you can complete the following tasks:
-
Automates certificate management: cert-manager creates or updates certificates and detects Kubernetes resources that are annotated with
cert-manager.io/kind. - Supports multiple CAs: provides flexibility to select one that fits the security and operational needs.
- Simplifies ingress certificates: cert-manager handles certificates for an ingress controller, which simplifies the configuration and management of secure communication channels.
- Enhances security: certificate management is automated and the risk of error is reduced. Certificates are current and valid, which contribute to a secure environment.
3.2. Installing and enabling the cert-manager Operator using RPM 링크 복사링크가 클립보드에 복사되었습니다!
The microshift-cert-manager RPM is an optional component that can be installed at any time. Follow these steps to install and verify the certificate manager:
Procedure
Install the
cert-manager-operatorusing themicroshift-cert-managerRPM by running the following command:sudo dnf install microshift-cert-manager
$ sudo dnf install microshift-cert-managerCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify the certificate manager versions that are used by running the following command:
rpm -qi microshift-cert-manager
$ rpm -qi microshift-cert-managerCopy to Clipboard Copied! Toggle word wrap Toggle overflow Restart MicroShift by running the following command:
systemctl microshift restart
$ systemctl microshift restartCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that the
microshift-cert-managerRPM is installed by running the following command:oc get deployment -n cert-manager-operator
$ oc get deployment -n cert-manager-operatorCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example output
NAME READY UP-TO-DATE AVAILABLE AGE cert-manager-operator-controller-manager 1/1 1 1 2d22h
NAME READY UP-TO-DATE AVAILABLE AGE cert-manager-operator-controller-manager 1/1 1 1 2d22hCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that the`cert-manager` deployments are in a ready state and are up-to-date in the cert-manager namespace by running the following command:
oc get deployment -n cert-manager
$ oc get deployment -n cert-managerCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example output
NAME READY UP-TO-DATE AVAILABLE AGE cert-manager 1/1 1 1 2d22h cert-manager-cainjector 1/1 1 1 2d22h cert-manager-webhook 1/1 1 1 2d22h
NAME READY UP-TO-DATE AVAILABLE AGE cert-manager 1/1 1 1 2d22h cert-manager-cainjector 1/1 1 1 2d22h cert-manager-webhook 1/1 1 1 2d22hCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that the pods are running in the
cert-managernamespace by running the following command:oc get pods -n cert-manager
$ oc get pods -n cert-managerCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example output
NAME READY STATUS RESTARTS AGE cert-manager-7cfb4fbb84-qdmk8 1/1 Running 2 2d22h cert-manager-cainjector-854f669657-xzs8b 1/1 Running 2 2d22h cert-manager-webhook-68fd6d5f5c-j942h 1/1 Running 2 2d22h
NAME READY STATUS RESTARTS AGE cert-manager-7cfb4fbb84-qdmk8 1/1 Running 2 2d22h cert-manager-cainjector-854f669657-xzs8b 1/1 Running 2 2d22h cert-manager-webhook-68fd6d5f5c-j942h 1/1 Running 2 2d22hCopy to Clipboard Copied! Toggle word wrap Toggle overflow
3.3. Installing and enabling the cert-manager Operator using OLM 링크 복사링크가 클립보드에 복사되었습니다!
You can install the optional microshift-cert-manager by using OLM at any time. For more information, see Using Operator Lifecycle Manager with MicroShift and Installing the cert-manager Operator for Red Hat OpenShift.