Verify that cert-manager installed correctly with the kubectl get pods command:
kubectl get pods -n cert-manager
NAME READY STATUS RESTARTS AGE
cert-manager-86c986667c-7tqgv 1/1 Running 0 2d21h
cert-manager-cainjector-74ccd955db-sb6ls 1/1 Running 0 2d21h
cert-manager-webhook-7cbb85cfb7-z9kwq 1/1 Running 0 2d21h
Summary
You now have cert-manager installed, and you are ready to install the ASM to provide the Istio
ingress function connectivity for your hybrid runtime plane.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-26 UTC."],[[["\u003cp\u003eThis documentation covers the installation of cert-manager version 1.7.2, which is required for Apigee hybrid to function.\u003c/p\u003e\n"],["\u003cp\u003eA fresh installation on a supported Anthos platform does not require these steps, as Anthos (version 1.8.2 and later) includes its own cert-manager, usable if installed in the \u003ccode\u003ecert-manager\u003c/code\u003e namespace.\u003c/p\u003e\n"],["\u003cp\u003eIf a custom cert-manager is necessary, consult the instructions in the 'Conflicting \u003ccode\u003ecert-manager\u003c/code\u003e installation' documentation before proceeding.\u003c/p\u003e\n"],["\u003cp\u003eInstallation of cert-manager is done using a \u003ccode\u003ekubectl\u003c/code\u003e command that applies the cert-manager configuration from GitHub.\u003c/p\u003e\n"],["\u003cp\u003eVerify the successful installation of cert-manager using \u003ccode\u003ekubectl get pods -n cert-manager\u003c/code\u003e and observing the status of the pods.\u003c/p\u003e\n"]]],[],null,["# Step 2: Install cert-manager\n\n| You are currently viewing version 1.7 of the Apigee hybrid documentation. **This version is end of life.** You should upgrade to a newer version. For more information, see [Supported versions](/apigee/docs/hybrid/supported-platforms#supported-versions).\n\nThis step explains how to download and install [cert-manager](https://cert-manager.io/docs/), required for Apigee hybrid to operate.\n| **Important:** You do not need to do this step if you are performing a fresh installation on a [supported Anthos platform](/apigee/docs/hybrid/supported-platforms). Anthos (versions 1.8.2 and later) comes with its own version of cert-manager. Apigee can use this Anthos version of cert-manager as long as it is installed in the `cert-manager` namespace (which is the default namespace).\n|\n|\n| If for certain reasons, you need to use your own cert-manager,\n| follow the steps described in [Conflicting `cert-manager` installation](/anthos/clusters/docs/on-prem/1.10/known-issues#conflicting_cert-manager_installation) before\n| continuing.\n\nInstall cert-manager\n--------------------\n\n1. Use the following command to install cert-manager v1.7.2 from GitHub. \n\n ```\n kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.7.2/cert-manager.yaml\n ```\n\n\n You should see a response that the cert-manager namespace and several cert-manager resources\n have been created. For example: \n\n ```\n customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io configured\n customresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io configured\n ...\n mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured\n validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured\n ```\n2. Verify that cert-manager installed correctly with the `kubectl get pods` command: \n\n ```\n kubectl get pods -n cert-manager\n ``` \n\n ```\n NAME READY STATUS RESTARTS AGE\n cert-manager-86c986667c-7tqgv 1/1 Running 0 2d21h\n cert-manager-cainjector-74ccd955db-sb6ls 1/1 Running 0 2d21h\n cert-manager-webhook-7cbb85cfb7-z9kwq 1/1 Running 0 2d21h\n ```\n\nSummary\n-------\n\n\nYou now have cert-manager installed, and you are ready to install the ASM to provide the Istio\ningress function connectivity for your hybrid runtime plane.\n[1](/apigee/docs/hybrid/v1.7/install-create-cluster) [2](/apigee/docs/hybrid/v1.7/install-cert-manager) [(NEXT) Step 3: Install ASM](/apigee/docs/hybrid/v1.7/install-asm) [4](/apigee/docs/hybrid/v1.7/install-apigeectl) [5](/apigee/docs/hybrid/v1.7/install-service-accounts) [6](/apigee/docs/hybrid/v1.7/install-create-tls-certificates) [7](/apigee/docs/hybrid/v1.7/install-configure-cluster) [8](/apigee/docs/hybrid/v1.7/install-enable-synchronizer-access) [9](/apigee/docs/hybrid/v1.7/install-hybrid-runtime)\n\n\u003cbr /\u003e"]]
