Este conteúdo não está disponível no idioma selecionado.
Chapter 3. Using certificate manager on a MicroShift node
The MicroShift certificate manager supports managing TLS certificates. This integration results in the issue, renewal, and management of certificate from certificate authorities.
3.1. MicroShift certificate manager functions
With MicroShift certificate manager, you can complete the following tasks:
- 
						Automates certificate management: cert-manager creates or updates certificates and detects Kubernetes resources that are annotated with cert-manager.io/kind.
- Supports multiple CAs: provides flexibility to select one that fits the security and operational needs.
- Simplifies ingress certificates: cert-manager handles certificates for an ingress controller, which simplifies the configuration and management of secure communication channels.
- Enhances security: certificate management is automated and the risk of error is reduced. Certificates are current and valid, which contribute to a secure environment.
3.2. Installing and enabling the cert-manager Operator using RPM
The microshift-cert-manager RPM is an optional component that can be installed at any time. Follow these steps to install and verify the certificate manager:
Procedure
- Install the - cert-manager-operatorusing the- microshift-cert-managerRPM by running the following command:- sudo dnf install microshift-cert-manager - $ sudo dnf install microshift-cert-manager- Copy to Clipboard Copied! - Toggle word wrap Toggle overflow 
- Verify the certificate manager versions that are used by running the following command: - rpm -qi microshift-cert-manager - $ rpm -qi microshift-cert-manager- Copy to Clipboard Copied! - Toggle word wrap Toggle overflow 
- Restart MicroShift by running the following command: - systemctl microshift restart - $ systemctl microshift restart- Copy to Clipboard Copied! - Toggle word wrap Toggle overflow 
- Verify that the - microshift-cert-managerRPM is installed by running the following command:- oc get deployment -n cert-manager-operator - $ oc get deployment -n cert-manager-operator- Copy to Clipboard Copied! - Toggle word wrap Toggle overflow - Example output - NAME READY UP-TO-DATE AVAILABLE AGE cert-manager-operator-controller-manager 1/1 1 1 2d22h - NAME READY UP-TO-DATE AVAILABLE AGE cert-manager-operator-controller-manager 1/1 1 1 2d22h- Copy to Clipboard Copied! - Toggle word wrap Toggle overflow 
- Verify that the`cert-manager` deployments are in a ready state and are up-to-date in the cert-manager namespace by running the following command: - oc get deployment -n cert-manager - $ oc get deployment -n cert-manager- Copy to Clipboard Copied! - Toggle word wrap Toggle overflow - Example output - NAME READY UP-TO-DATE AVAILABLE AGE cert-manager 1/1 1 1 2d22h cert-manager-cainjector 1/1 1 1 2d22h cert-manager-webhook 1/1 1 1 2d22h - NAME READY UP-TO-DATE AVAILABLE AGE cert-manager 1/1 1 1 2d22h cert-manager-cainjector 1/1 1 1 2d22h cert-manager-webhook 1/1 1 1 2d22h- Copy to Clipboard Copied! - Toggle word wrap Toggle overflow 
- Verify that the pods are running in the - cert-managernamespace by running the following command:- oc get pods -n cert-manager - $ oc get pods -n cert-manager- Copy to Clipboard Copied! - Toggle word wrap Toggle overflow - Example output - NAME READY STATUS RESTARTS AGE cert-manager-7cfb4fbb84-qdmk8 1/1 Running 2 2d22h cert-manager-cainjector-854f669657-xzs8b 1/1 Running 2 2d22h cert-manager-webhook-68fd6d5f5c-j942h 1/1 Running 2 2d22h - NAME READY STATUS RESTARTS AGE cert-manager-7cfb4fbb84-qdmk8 1/1 Running 2 2d22h cert-manager-cainjector-854f669657-xzs8b 1/1 Running 2 2d22h cert-manager-webhook-68fd6d5f5c-j942h 1/1 Running 2 2d22h- Copy to Clipboard Copied! - Toggle word wrap Toggle overflow 
3.3. Installing and enabling the cert-manager Operator using OLM
				You can install the optional microshift-cert-manager by using OLM at any time. For more information, see Using Operator Lifecycle Manager with MicroShift and Installing the cert-manager Operator for Red Hat OpenShift.