
Fixed typo in LetsEncrypt example Removed duplicate Datanet entry from main index.rst Reworked Use Kubernetes CPU Manager Static Policy prerequisite block. Restored fault/index version of FM toctree in top-level index. Added merged doc entries to top level index.rst. Incorporated review comments. Also some generic formatting clean-up such as converting abbreviations to rST-style :abbr: markup. Moved url with embedded substitution out of code-block. Addressed patch 2 review comments. Some addtional rST tidying. See comment replies for open questions/issues. This patch fixes an issue with 'stx' in filenames that may differ downstream using-an-image-from-the-local-docker-registry-in-a-container-spec new substitution and changing code-blocks to parsed-literals as required. Initial submission for review. Note that a couple of references to WR persist in examples. These will be marked up with comments in the review. Signed-off-by: Stone <ronald.stone@windriver.com> Change-Id: I1efef569842caff5def9dc00395b594d91d7a5d0 Signed-off-by: Stone <ronald.stone@windriver.com>
2.3 KiB
Cert Manager
integrates the open source project cert-manager.
Cert-manager is a native Kubernetes certificate management controller, that supports certificate management with external certificate authorities (CAs). nginx-ingress-controller is also integrated with in support of http-01 challenges from CAs as part of cert-manager certificate requests.
For more information about Cert Manager, see cert-manager.io.
Prerequisites for using Cert Manager
- Ensure that your administrator has shared the local registry's
public repository's credentials/secret with the namespace where you will
create certificates,. This will allow you to leverage the
registry.local:9001/public/cert-manager-acmesolver
image. - Ensure that your administrator has enabled use of the cert-manager apiGroups in your RBAC policies.
Resources on Creating Issuers and Certificates
- Configuration documentation:
https://cert-manager.io/docs/configuration/
This link provides details on creating different types of certificate issuers or CAs.
- Usage documentation:
https://cert-manager.io/docs/usage/certificate/
This link provides details on creating a standalone certificate.
https://cert-manager.io/docs/usage/ingress/
This link provides details on adding a cert-manager annotation to an Ingress in order to specify the certificate issuer for the ingress to use to request the certificate for its https connection.
LetsEncrypt Example <letsencrypt-example>