Learn how to automate the installation of cert-manager using tools like Flux and Argo CD.
You can use the cert-manager Helm chart directly with tools like Flux, ArgoCD and Anthos, and you can output YAML using helm template to generate customized cert-manager installation manifests, which can be piped into your preferred deployment tool.
This page contains notes about how to install cert-manager with some of these tools.
📢 Please help us improve this page by contributing notes or short tutorials about using cert-manager with common GitOps and continuous deployment tools.
The cert-manager Helm chart can be installed by the Flux Helm Controller.
First create a
configured with URL of the cert-manager Helm repository.
Then create a
configured with your desired cert-manager chart values and release.
Here is an example which installs the latest patch version of the cert-manager 1.12 release, and then upgrades to the latest patch version of the 1.13 release.
⚠️ This is a simple example which may not be suitable for production use. You should also refer to the official Flux example repo, where cert-manager is now fully integrated. It shows how to deploy ClusterIssuer resources in the right order, after cert-manager CRDs and controller have been installed.
Here's how to quickly install Flux on a Kind cluster:
kind create clusterflux check --preflux installflux check
flux create source helm cert-manager --url https://charts.jetstack.io
Put your Helm chart values in a
installCRDs value, so that Flux can install and upgrade the CRD resources.
# values.yamlinstallCRDs: true
flux create helmrelease cert-manager \--chart cert-manager \--source HelmRepository/cert-manager.flux-system \--release-name cert-manager \--target-namespace cert-manager \--create-target-namespace \--values values.yaml \--chart-version 1.12.x
And when you want to upgrade to the cert-manager 1.13 release, you can simply update the partial semantic version in the chart version:
flux create helmrelease cert-manager \--chart cert-manager \--source HelmRepository/cert-manager.flux-system \--release-name cert-manager \--target-namespace cert-manager \--create-target-namespace \--values values.yaml \--chart-version 1.13.x
Check Flux events and logs for warnings and errors:
flux eventsflux logs
cmctl to check for problems with the cert-manager webhook or CRDs:
cmctl check apicmctl version -o yaml
Check the cert-manager logs for warnings and errors:
kubectl logs -n cert-manager -l app.kubernetes.io/instance=cert-manager --prefix --all-containers