Step 2: Install cert-manager

This step explains how to download and install cert-manager, required for Apigee hybrid to operate.

Important: You do not need to do this step if you are performing a fresh installation on a supported Anthos platform. Anthos (versions 1.8.2 and later) comes with its own version of cert-manager. Apigee can use this Anthos version of cert-manager as long as it is installed in the cert-manager namespace (which is the default namespace).

If for certain reasons, you need to use your own cert-manager, follow the steps described in Conflicting cert-manager installation before continuing.

Install cert-manager

Use the following command to install cert-manager v1.7.2 from GitHub.

kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.7.2/cert-manager.yaml

You should see a response that the cert-manager namespace and several cert-manager resources have been created. For example:

customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io configured
customresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io configured
...
mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured

Verify that cert-manager installed correctly with the kubectl get pods command:

kubectl get pods -n cert-manager

NAME                                       READY   STATUS    RESTARTS   AGE
cert-manager-86c986667c-7tqgv              1/1     Running   0          2d21h
cert-manager-cainjector-74ccd955db-sb6ls   1/1     Running   0          2d21h
cert-manager-webhook-7cbb85cfb7-z9kwq      1/1     Running   0          2d21h

Summary

You now have cert-manager installed, and you are ready to install the ASM to provide the Istio ingress function connectivity for your hybrid runtime plane.

1 2 (NEXT) Step 3: Install ASM 4 5 6 7 8 9