Este conteúdo não está disponível no idioma selecionado.
Chapter 3. Using certificate manager on a MicroShift node
The MicroShift certificate manager supports managing TLS certificates. This integration results in the issue, renewal, and management of certificate from certificate authorities.
3.1. MicroShift certificate manager functions Copiar o linkLink copiado para a área de transferência!
With MicroShift certificate manager, you can complete the following tasks:
-
Automates certificate management: cert-manager creates or updates certificates and detects Kubernetes resources that are annotated with
cert-manager.io/kind. - Supports multiple CAs: provides flexibility to select one that fits the security and operational needs.
- Simplifies ingress certificates: cert-manager handles certificates for an ingress controller, which simplifies the configuration and management of secure communication channels.
- Enhances security: certificate management is automated and the risk of error is reduced. Certificates are current and valid, which contribute to a secure environment.
3.2. Installing and enabling the cert-manager Operator using RPM Copiar o linkLink copiado para a área de transferência!
The microshift-cert-manager RPM is an optional component that can be installed at any time. Follow these steps to install and verify the certificate manager:
Procedure
Install the
cert-manager-operatorusing themicroshift-cert-managerRPM by running the following command:sudo dnf install microshift-cert-manager
$ sudo dnf install microshift-cert-managerCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify the certificate manager versions that are used by running the following command:
rpm -qi microshift-cert-manager
$ rpm -qi microshift-cert-managerCopy to Clipboard Copied! Toggle word wrap Toggle overflow Restart MicroShift by running the following command:
systemctl microshift restart
$ systemctl microshift restartCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that the
microshift-cert-managerRPM is installed by running the following command:oc get deployment -n cert-manager-operator
$ oc get deployment -n cert-manager-operatorCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example output
NAME READY UP-TO-DATE AVAILABLE AGE cert-manager-operator-controller-manager 1/1 1 1 2d22h
NAME READY UP-TO-DATE AVAILABLE AGE cert-manager-operator-controller-manager 1/1 1 1 2d22hCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that the`cert-manager` deployments are in a ready state and are up-to-date in the cert-manager namespace by running the following command:
oc get deployment -n cert-manager
$ oc get deployment -n cert-managerCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example output
NAME READY UP-TO-DATE AVAILABLE AGE cert-manager 1/1 1 1 2d22h cert-manager-cainjector 1/1 1 1 2d22h cert-manager-webhook 1/1 1 1 2d22h
NAME READY UP-TO-DATE AVAILABLE AGE cert-manager 1/1 1 1 2d22h cert-manager-cainjector 1/1 1 1 2d22h cert-manager-webhook 1/1 1 1 2d22hCopy to Clipboard Copied! Toggle word wrap Toggle overflow Verify that the pods are running in the
cert-managernamespace by running the following command:oc get pods -n cert-manager
$ oc get pods -n cert-managerCopy to Clipboard Copied! Toggle word wrap Toggle overflow Example output
NAME READY STATUS RESTARTS AGE cert-manager-7cfb4fbb84-qdmk8 1/1 Running 2 2d22h cert-manager-cainjector-854f669657-xzs8b 1/1 Running 2 2d22h cert-manager-webhook-68fd6d5f5c-j942h 1/1 Running 2 2d22h
NAME READY STATUS RESTARTS AGE cert-manager-7cfb4fbb84-qdmk8 1/1 Running 2 2d22h cert-manager-cainjector-854f669657-xzs8b 1/1 Running 2 2d22h cert-manager-webhook-68fd6d5f5c-j942h 1/1 Running 2 2d22hCopy to Clipboard Copied! Toggle word wrap Toggle overflow
3.3. Installing and enabling the cert-manager Operator using OLM Copiar o linkLink copiado para a área de transferência!
You can install the optional microshift-cert-manager by using OLM at any time. For more information, see Using Operator Lifecycle Manager with MicroShift and Installing the cert-manager Operator for Red Hat OpenShift.