Operator Lifecycle Manager
Installation managed by OLM
- A Kubernetes or OpenShift cluster running a supported version
- cert-manager not already installed on the cluster
- Prerequisites specific to your cloud provider
Option 1: Installing from OperatorHub Web Console on OpenShift
cert-manager is in the Red Hat-provided Operator catalog called "community-operators". On OpenShift 4 you can install cert-manager from the OperatorHub web console or from the command line. These installation methods are described in Red Hat's Adding Operators to a cluster documentation.
Option 2: Installing from OperatorHub.io
Browse to the cert-manager page on OperatorHub.io, click the "Install" button and follow the installation instructions.
Option 3: Manual install via
kubectl operator plugin
Install OLM and install the
kubectl operator plugin
from the Krew Kubectl plugins index and then use that to install the cert-manager as follows:
operator-sdk olm installkubectl krew install operatorkubectl operator install cert-manager -n operators --channel stable --approval Automatic
You can monitor the progress of the installation as follows:
kubectl get events -w -n operators
And you can see the status of the installation with:
kubectl operator list
Whichever installation method you chose, there will now be an OLM Subscription resource for cert-manager, tracking the "stable" release channel. E.g.
$ kubectl get subscription cert-manager -n operators -o yaml...spec:channel: stableinstallPlanApproval: Automaticname: cert-manager...status:currentCSV: cert-manager.v1.4.0state: AtLatestKnown...
This means that OLM will discover new cert-manager releases in the stable channel, and, depending on the Subscription settings it will upgrade cert-manager automatically, when new releases become available. Read Manually Approving Upgrades via Subscriptions for information about automatic and manual upgrades.
NOTE: There is a single release channel called "stable" which will contain all cert-manager releases, shortly after they are released. In future we may introduce other release channels with alternative release schedules, in accordance with OLM's Recommended Channel Naming.
Debugging installation issues
If you have any issues with your installation, please refer to the FAQ.
Below is the processes for uninstalling cert-manager on OpenShift.
Warning: To uninstall cert-manager you should always use the same process for installing but in reverse. Deviating from the following process can cause issues and potentially broken states. Please ensure you follow the below steps when uninstalling to prevent this happening.