Manually trigger renewal

Force cert-manager to renew a certificate immediately

kubectl annotate certificate my-cert cert-manager.io/issueTime="$(date -u +%Y-%m-%dT%H:%M:%SZ)" --overwrite
tool
cert-manager16 commands
tags
cert-managertlsrenew

More cert-manager commands

  • View cert-manager logs
    kubectl logs -n cert-manager deploy/cert-manager -f

    Stream logs from the main cert-manager controller

  • cmctl check API
    cmctl check api

    Verify cert-manager API is ready using the cmctl CLI

  • Create ClusterIssuer (Let's Encrypt)
    kubectl apply -f - <<EOF apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: letsencrypt-prod spec: acme: server: https://acme-v02.api.letsencrypt.org/directory email: admin@example.com privateKeySecretRef: name: letsencrypt-prod solvers: - http01: ingress: class: nginx EOF

    Create Let's Encrypt prod ClusterIssuer with HTTP-01 solver

  • Force certificate renewal
    cmctl renew <name> -n <ns>

    Trigger immediate reissue without waiting for the renewal window; watch a new CertificateRequest spawn

  • Certificate status playbook
    cmctl status certificate <name> -n <ns>

    End-to-end view: Certificate, Request, Order, Challenge and the exact ACME failure reason

all 16 cert-manager commands