Inspect issued secret contents cert-manager
Decode the tls.crt and show issuer, SANs, validity without manual openssl x509 piping
cmctl inspect secret <name> -n <ns>
more cert-manager
all 16 commands →
DNS01 Route53 ClusterIssuer
kubectl apply -f - <<EOF
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
name: letsencrypt-dns
spec:
acme:
server: https://acme-v02.api.letsencrypt.org/directory
privateKeySecretRef:
name: letsencrypt-dns
solvers:
- dns01:
route53:
region: us-east-1
hostedZoneID: <id>
EOF
Stuck ACME challenges
kubectl get challenges -A -o wide && kubectl describe challenge -n <ns> <name>
Install cert-manager via Helm
helm install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --set installCRDs=true
Check cert-manager pods
kubectl get pods -n cert-manager
List certificates
kubectl get certificates -A