Step 2: Install cert-manager

This step explains how to download and install cert-manager, required for Apigee hybrid to operate.

Install cert-manager

1. Use the following command to install cert-manager v1.7.2 from GitHub.

   kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.7.2/cert-manager.yaml

   You should see a response that the cert-manager namespace and several cert-manager resources have been created. For example:

   customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io configured
   customresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io configured
   ...
   mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
   validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
   

2. Verify that cert-manager installed correctly with the kubectl get pods command:

   kubectl get pods -n cert-manager
   

   NAME                                       READY   STATUS    RESTARTS   AGE
   cert-manager-86c986667c-7tqgv              1/1     Running   0          2d21h
   cert-manager-cainjector-74ccd955db-sb6ls   1/1     Running   0          2d21h
   cert-manager-webhook-7cbb85cfb7-z9kwq      1/1     Running   0          2d21h

Summary

You now have cert-manager installed, and you are ready to install the ASM to provide the Istio ingress function connectivity for your hybrid runtime plane.

1 2 (NEXT) Step 3: Install ASM 4 5 6 7 8 9