Step 2: Install cert-manager

This step explains how to download and install cert-manager, required for Apigee hybrid to operate.

Install cert-manager

  1. Use the following command to install cert-manager v1.5.4 from GitHub. 
    kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.5.4/cert-manager.yaml

    You should see a response that the cert-manager namespace and several cert-manager resources have been created. For example: 

    customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io configured
customresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io configured
...
mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
  2. Verify that cert-manager installed correctly with the kubectl get pods command: 
    kubectl get pods -n cert-manager

    NAME                                       READY   STATUS    RESTARTS   AGE
cert-manager-86c986667c-7tqgv              1/1     Running   0          2d21h
cert-manager-cainjector-74ccd955db-sb6ls   1/1     Running   0          2d21h
cert-manager-webhook-7cbb85cfb7-z9kwq      1/1     Running   0          2d21h

Summary

You now have cert-manager installed, and you are ready to install the ASM to provide the Istio ingress function connectivity for your hybrid runtime plane.

1 2 (NEXT) Step 3: Install ASM 4 5 6 7 8 9