Create ClusterIssuer (Let's Encrypt)

Apply a ClusterIssuer manifest for Let's Encrypt ACME

kubectl apply -f clusterissuer-letsencrypt.yaml
tool
cert-manager16 commands
tags
cert-managertlsletsencryptacme

More cert-manager commands

  • Check ClusterIssuers
    kubectl get clusterissuers

    List all ClusterIssuer resources and their ready status

  • Manually trigger renewal
    kubectl annotate certificate my-cert cert-manager.io/issueTime="$(date -u +%Y-%m-%dT%H:%M:%SZ)" --overwrite

    Force cert-manager to renew a certificate immediately

  • View cert-manager logs
    kubectl logs -n cert-manager deploy/cert-manager -f

    Stream logs from the main cert-manager controller

  • cmctl check API
    cmctl check api

    Verify cert-manager API is ready using the cmctl CLI

  • Create ClusterIssuer (Let's Encrypt)
    kubectl apply -f - <<EOF apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: letsencrypt-prod spec: acme: server: https://acme-v02.api.letsencrypt.org/directory email: admin@example.com privateKeySecretRef: name: letsencrypt-prod solvers: - http01: ingress: class: nginx EOF

    Create Let's Encrypt prod ClusterIssuer with HTTP-01 solver

all 16 cert-manager commands