Force certificate renewal cert-manager
Trigger immediate reissue without waiting for the renewal window; watch a new CertificateRequest spawn
cmctl renew <name> -n <ns>
more cert-manager
all 16 commands →
Certificate status playbook
cmctl status certificate <name> -n <ns>
Inspect issued secret contents
cmctl inspect secret <name> -n <ns>
DNS01 Route53 ClusterIssuer
kubectl apply -f - <<EOF
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-dns
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
privateKeySecretRef:
name: letsencrypt-dns
solvers:
- dns01:
route53:
region: us-east-1
hostedZoneID: <id>
EOF
Stuck ACME challenges
kubectl get challenges -A -o wide && kubectl describe challenge -n <ns> <name>
Install cert-manager via Helm
helm install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --set installCRDs=true