Este conteúdo não está disponível no idioma selecionado.

Chapter 3. Using certificate manager on a MicroShift node


The MicroShift certificate manager supports managing TLS certificates. This integration results in the issue, renewal, and management of certificate from certificate authorities.

3.1. MicroShift certificate manager functions

With MicroShift certificate manager, you can complete the following tasks:

  • Automates certificate management: cert-manager creates or updates certificates and detects Kubernetes resources that are annotated with cert-manager.io/kind.
  • Supports multiple CAs: provides flexibility to select one that fits the security and operational needs.
  • Simplifies ingress certificates: cert-manager handles certificates for an ingress controller, which simplifies the configuration and management of secure communication channels.
  • Enhances security: certificate management is automated and the risk of error is reduced. Certificates are current and valid, which contribute to a secure environment.

3.2. Installing and enabling the cert-manager Operator using RPM

The microshift-cert-manager RPM is an optional component that can be installed at any time. Follow these steps to install and verify the certificate manager:

Procedure

  1. Install the cert-manager-operator using the microshift-cert-manager RPM by running the following command:

    $ sudo dnf install microshift-cert-manager
    Copy to Clipboard Toggle word wrap
  2. Verify the certificate manager versions that are used by running the following command:

    $ rpm -qi microshift-cert-manager
    Copy to Clipboard Toggle word wrap
  3. Restart MicroShift by running the following command:

    $ systemctl microshift restart
    Copy to Clipboard Toggle word wrap
  4. Verify that the microshift-cert-manager RPM is installed by running the following command:

    $ oc get deployment -n  cert-manager-operator
    Copy to Clipboard Toggle word wrap

    Example output

    NAME                                       READY   UP-TO-DATE   AVAILABLE   AGE
    cert-manager-operator-controller-manager   1/1     1            1           2d22h
    Copy to Clipboard Toggle word wrap

  5. Verify that the`cert-manager` deployments are in a ready state and are up-to-date in the cert-manager namespace by running the following command:

    $ oc get deployment -n cert-manager
    Copy to Clipboard Toggle word wrap

    Example output

    NAME                      READY   UP-TO-DATE   AVAILABLE   AGE
    cert-manager              1/1     1            1           2d22h
    cert-manager-cainjector   1/1     1            1           2d22h
    cert-manager-webhook      1/1     1            1           2d22h
    Copy to Clipboard Toggle word wrap

  6. Verify that the pods are running in the cert-manager namespace by running the following command:

    $ oc get pods -n cert-manager
    Copy to Clipboard Toggle word wrap

    Example output

    NAME                                       READY   STATUS    RESTARTS   AGE
    cert-manager-7cfb4fbb84-qdmk8              1/1     Running   2          2d22h
    cert-manager-cainjector-854f669657-xzs8b   1/1     Running   2          2d22h
    cert-manager-webhook-68fd6d5f5c-j942h      1/1     Running   2          2d22h
    Copy to Clipboard Toggle word wrap

3.3. Installing and enabling the cert-manager Operator using OLM

You can install the optional microshift-cert-manager by using OLM at any time. For more information, see Using Operator Lifecycle Manager with MicroShift and Installing the cert-manager Operator for Red Hat OpenShift.

Voltar ao topo
Red Hat logoGithubredditYoutubeTwitter

Aprender

Experimente, compre e venda

Comunidades

Sobre a documentação da Red Hat

Ajudamos os usuários da Red Hat a inovar e atingir seus objetivos com nossos produtos e serviços com conteúdo em que podem confiar. Explore nossas atualizações recentes.

Tornando o open source mais inclusivo

A Red Hat está comprometida em substituir a linguagem problemática em nosso código, documentação e propriedades da web. Para mais detalhes veja o Blog da Red Hat.

Sobre a Red Hat

Fornecemos soluções robustas que facilitam o trabalho das empresas em plataformas e ambientes, desde o data center principal até a borda da rede.

Theme

© 2025 Red Hat