cmctl check API cert-manager

Create ClusterIssuer (Let's Encrypt) kubectl apply -f - <<EOF apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: letsencrypt-prod spec: acme: server: https://acme-v02.api.letsencrypt.org/directory email: admin@example.com privateKeySecretRef: name: letsencrypt-prod solvers: - http01: ingress: class: nginx EOF Force certificate renewal cmctl renew <name> -n <ns> Certificate status playbook cmctl status certificate <name> -n <ns> Inspect issued secret contents cmctl inspect secret <name> -n <ns> DNS01 Route53 ClusterIssuer kubectl apply -f - <<EOF apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: letsencrypt-dns spec: acme: server: https://acme-v02.api.letsencrypt.org/directory privateKeySecretRef: name: letsencrypt-dns solvers: - dns01: route53: region: us-east-1 hostedZoneID: <id> EOF