Kubectl plugin

Installing using the kubectl plugin

Prerequisites

• Install the kubectl cert-manager plugin.
• Install a supported version of Kubernetes or OpenShift.
• Read Compatibility with Kubernetes Platform Providers if you are using Kubernetes on a cloud platform.

Steps

The plugin provides the simplest way of installing cert-manager:

$ kubectl cert-manager x install

The command makes sure that the required CustomResourceDefinitions are installed together with the cert-manager, cainjector and webhook components. Under the hood, a procedure similar to the Helm install procedure is used.

You can also use kubectl cert-manager x install to customize the installation of cert-manager.

The example below shows how to tune the cert-manager installation by overwriting the default Helm values:

$ kubectl cert-manager x install \
    --set prometheus.enabled=false \  # Example: disabling prometheus using a Helm parameter
    --set webhook.timeoutSeconds=4s   # Example: changing the wehbook timeout using a Helm parameter

You can find a full list of the install parameters on cert-manager's ArtifactHub page. These are the same parameters that are available when using the Helm chart. Once you have deployed cert-manager, you can verify the installation.

Output YAML

The kubectl plugin also allows the user to output the templated manifest to stdout, instead of installing the manifest on the cluster.

$ kubectl cert-manager x install \
    --dry-run \
    > cert-manager.custom.yaml