[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-26 UTC."],[[["\u003cp\u003eApigee hybrid version 1.8 is end of life and should be upgraded to a newer version.\u003c/p\u003e\n"],["\u003cp\u003eCert-manager is required for Apigee hybrid to operate, but is not needed for fresh installations on supported Anthos platforms (versions 1.8.2 and later).\u003c/p\u003e\n"],["\u003cp\u003eTo install cert-manager v1.7.2, the provided command from the GitHub repository must be used.\u003c/p\u003e\n"],["\u003cp\u003eVerify the successful creation of cert-manager by checking the cert-manager namespace and the status of the pods: cert-manager, cert-manager-cainjector, and cert-manager-webhook.\u003c/p\u003e\n"]]],[],null,["# Step 2: Install cert-manager\n\n| You are currently viewing version 1.8 of the Apigee hybrid documentation. **This version is end of life.** You should upgrade to a newer version. For more information, see [Supported versions](/apigee/docs/hybrid/supported-platforms#supported-versions).\n\nThis step explains how to download and install [cert-manager](https://cert-manager.io/docs/), required for Apigee hybrid to operate.\n| **Important:** You do not need to do this step if you are performing a fresh installation on a [supported Anthos platform](/apigee/docs/hybrid/supported-platforms). Anthos (versions 1.8.2 and later) comes with its own version of cert-manager. Apigee can use this Anthos version of cert-manager as long as it is installed in the `cert-manager` namespace (which is the default namespace).\n|\n|\n| If for certain reasons, you need to use your own cert-manager, follow the steps described in\n| [Conflicting\n| cert-manager installation](/anthos/clusters/docs/on-prem/1.12/known-issues#conflicting-cert-manager-installation).\n\nInstall cert-manager\n--------------------\n\n1. Use the following command to install cert-manager v1.7.2 from GitHub. \n\n ```\n kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.7.2/cert-manager.yaml\n ```\n\n\n You should see a response that the cert-manager namespace and several cert-manager resources\n have been created. For example: \n\n ```\n customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io configured\n customresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io configured\n ...\n mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured\n validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured\n ```\n2. Use the following command to verify the successful creation of cert-manager namespace and its corresponding components: \n\n ```\n # kubectl get all -n cert-manager -o wide\n \n ```\n\n Your output should be similar to the following example.\n You should see pods for `cert-manager`, `cert-manager-cainjector`, and `cert-manager-webhook`. \n\n ```\n NAME READY STATUS RESTARTS AGE IP NODE NOMINATED NODE READINESS GATES\n pod/cert-manager-8568b6f9cb-cz4h2 1/1 Running 0 2d6h 10.56.3.7 gke-cluster-01-apigee-data-d932c3f6-0v1j \n pod/cert-manager-cainjector-c9c77b797-nk56p 1/1 Running 0 2d6h 10.56.7.2 gke-cluster-01-apigee-data-8a689178-en9x \n pod/cert-manager-webhook-885b8ffcb-q6vvk 1/1 Running 0 2d6h 10.56.3.2 gke-cluster-01-apigee-data-d932c3f6-0v1j \n\n NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE SELECTOR\n service/cert-manager ClusterIP 10.60.2.36 9402/TCP 91d app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager\n service/cert-manager-webhook ClusterIP 10.60.10.97 443/TCP 91d app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook\n\n NAME READY UP-TO-DATE AVAILABLE AGE CONTAINERS IMAGES SELECTOR\n deployment.apps/cert-manager 1/1 1 1 91d cert-manager quay.io/jetstack/cert-manager-controller:v1.7.2 app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager\n deployment.apps/cert-manager-cainjector 1/1 1 1 91d cert-manager quay.io/jetstack/cert-manager-cainjector:v1.7.2 app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector\n deployment.apps/cert-manager-webhook 1/1 1 1 91d cert-manager quay.io/jetstack/cert-manager-webhook:v1.7.2 app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook\n\n NAME DESIRED CURRENT READY AGE CONTAINERS IMAGES SELECTOR\n replicaset.apps/cert-manager-8568b6f9cb 1 1 1 91d cert-manager quay.io/jetstack/cert-manager-controller:v1.7.2 app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,pod-template-hash=8568b6f9cb\n replicaset.apps/cert-manager-cainjector-c9c77b797 1 1 1 91d cert-manager quay.io/jetstack/cert-manager-cainjector:v1.7.2 app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,pod-template-hash=c9c77b797\n replicaset.apps/cert-manager-webhook-885b8ffcb 1 1 1 91d cert-manager quay.io/jetstack/cert-manager-webhook:v1.7.2 app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,pod-template-hash=885b8ffcb\n \n ```\n\nSummary\n-------\n\n\nYou now have cert-manager installed, and you are ready to install the Apigee hybrid\ncommand-line tool on your local machine.\n[1](/apigee/docs/hybrid/v1.8/install-create-cluster) [2](/apigee/docs/hybrid/v1.8/install-cert-manager) [(NEXT) Step 3: Install apigeectl](/apigee/docs/hybrid/v1.8/install-apigeectl) [4](/apigee/docs/hybrid/v1.8/install-service-accounts) [5](/apigee/docs/hybrid/v1.8/install-create-tls-certificates) [6](/apigee/docs/hybrid/v1.8/install-configure-cluster) [7](/apigee/docs/hybrid/v1.8/install-enable-synchronizer-access) [8](/apigee/docs/hybrid/v1.8/install-hybrid-runtime) [9](/apigee/docs/hybrid/v1.8/install-expose-apigee-ingress) [10](/apigee/docs/hybrid/v1.8/install-deploy-proxy)\n\n\u003cbr /\u003e"]]
