Skip to content

Helm chart for cert-manager service running in workload clusters

License

Notifications You must be signed in to change notification settings

giantswarm/cert-manager-app

Repository files navigation

CircleCI

cert-manager-app

Helm chart for the cert-manager app running in Giant Swarm clusters.

This repository contains the source of the helm chart for the Giant Swarm cert-manager app. This fork tracks the upstream chart closely but contains some changes to make it run smoothly on Giant Swarm clusters.

cert-manager adds certificates and certificate issuers (e.g. Let's Encrypt (ACME)) as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates.

Index

Installing

There are 2 ways to install this app onto a workload cluster. If your clusters are running on AWS, cert-manager is already installed as a default app.

  1. Using our web interface
  2. Directly creating the App custom resource on the management cluster.

Issuing Certificates

First, an Issuer should be configured. There are several ways to issue certificates through cert-manager. Check upstream documentation for your use case.

Configuration

Configuration options are documented in Configuration.md document.

Upgrading

Before upgrading, please check Upgrading.md.

Contributing & Reporting Bugs

If you have suggestions for how cert-manager could be improved, or want to report a bug, open an issue! We'd love all and any contributions.

Check out the Contributing Guide for details on the contribution workflow, submitting patches, and reporting bugs.

Release Process

  • Ensure CHANGELOG.md is up to date.
  • Create a new branch to trigger the release workflow as either a patch, minor, or major. E.g. to release a patch, create a branch from main called release#patch and push it. Automation will create a release PR.
  • Merging the release PR will push a new git tag and trigger a new tarball to be pushed to the giantswarm-catalog.
  • Test and verify the cert-manager release across supported environments in a new or existing WIP platform release.