liveBook · Manning

Cert-manager

As explained in Server-Side WebAssembly

cert-manager is a Kubernetes add-on that automates the issuance and renewal of TLS certificates.

cert-manager is a Kubernetes add-on that automates TLS certificate issuance and renewal. SpinKube uses it to secure admission webhooks, allowing the Kubernetes API server to communicate with the operator over HTTPS when validating or defaulting Spin application resources. section 8.2.1

kubectl apply -f https://github.com/cert-manager/cert-
➥manager/releases/download/v1.14.3/cert-manager.yaml
kubectl wait --for=condition=available --timeout=300s deployment/cert-
➥manager-webhook -n cert-manager

Install cert-manager from the v1.14.3 manifest, then wait for its webhook deployment to become available before installing SpinKube. section 8.2.1

How Server-Side WebAssembly covers it

How deep it goes
Explains its purpose, webhook relationship, installation command, and readiness check without detailing certificate-resource internals.
Examples
Uses a kubectl manifest installation and waits for the cert-manager-webhook deployment in the cert-manager namespace.
What it assumes
Assumes a Kubernetes cluster and introduces cert-manager as one of the cluster-preparation steps.
What you can do after
Operate/configure cert-manager before deploying SpinKube components that require secure admission webhooks.
How it connects
Connects Kubernetes, TLS, HTTPS, admission webhooks, and SpinKube.

Also explained in

Compare how 2 books explain cert-manager →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Server-Side WebAssembly. The section links point to the parts of the book it draws on.