cert‐manager

Objective:

To test cert-manager with MinIO in k8s

Related test:

• https://github.com/minio/operator/pull/1844

Documentation:

• https://github.com/minio/operator/blob/master/docs/cert-manager.md
• https://cert-manager.io/docs/installation/
• https://stackoverflow.com/questions/53536907/kubectl-wait-for-condition-complete-timeout-30s
• https://stackoverflow.com/questions/71384532/kubernetes-wait-for-secret-to-be-created

Steps:

1. Create cluster:

createcluster ingress

2. Install cert-manager:

kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.13.2/cert-manager.yaml

echo "Wait until cert-manager pods are running:"
kubectl wait -n cert-manager --for=condition=ready pod -l app=cert-manager --timeout=120s
kubectl wait -n cert-manager --for=condition=ready pod -l app=cainjector --timeout=120s
kubectl wait -n cert-manager --for=condition=ready pod -l app=webhook --timeout=120s

3. Install Operator

installoperator ingress

4. Install Tenant with cert-manager: https://github.com/minio/operator/tree/master/examples/kustomization/tenant-certmanager

kustomize build github.com/minio/operator/examples/kustomization/tenant-lite\?ref\=v5.0.10 > /Users/cniackz/bash-config/config-files/kustomize/Tenant/kustomize-tenant-5-0-10.yaml

k apply -f /Users/cniackz/bash-config/config-files/kustomize/Tenant/kustomize-tenant-cert-manager-5-0-10.yaml

OR

kubectl apply -k github.com/minio/operator/examples/kustomization/tenant-certmanager

5. Create operator-ca-tls secret

kubectl get secrets -n tenant-certmanager tenant-certmanager-tls -o=jsonpath='{.data.ca\.crt}' | base64 -d > public.crt

kubectl create secret generic operator-ca-tls --from-file=public.crt -n minio-operator

kubectl rollout restart deployment.apps/minio-operator -n minio-operator

Current Issue:

https://github.com/minio/operator/issues/1839