Installing OpenShift Routes for cert-manager using Helm¶

Learn how to install OpenShift Routes for cert-manager for cert-manager using Helm.

Step 1: Configure access to the CyberArk OCI registry¶

Configure access to the CyberArk OCI registry. Follow the instructions in Configuring access to the CyberArk OCI Registry to enable access to the artifacts required for this component (cert-manager Components is the default scope for cert-manager). Use venafi as the namespace.

The sample file below, for example, assumes you created a Kubernetes Secret using venafi as the namespace and venafi-image-pull-secret as the name of the secret.

Step 2: Install cert-manager using Helm¶

If you are running OpenShift Routes for cert-manager you must also install cert-manager.

1. To install cert-manager in the venafi namespace, and configure it to use the pull-secret, create a file cert-manager.values.yaml containing the following content.

   Venafi RegistryOwn Registry

   A sample cert-manager.values.yaml for users of the US region OCI registry:

   cert-manager.values.yaml

   global:
     imagePullSecrets:
       - name: venafi-image-pull-secret
   
   crds:
     enabled: true
   
   image:
     repository: private-registry.venafi.cloud/cert-manager/cert-manager-controller
   
   acmesolver:
     image:
       repository: private-registry.venafi.cloud/cert-manager/cert-manager-acmesolver
   
   webhook:
     image:
       repository: private-registry.venafi.cloud/cert-manager/cert-manager-webhook
   
   cainjector:
     image:
       repository: private-registry.venafi.cloud/cert-manager/cert-manager-cainjector
   
   startupapicheck:
     image:
       repository: private-registry.venafi.cloud/cert-manager/cert-manager-startupapicheck
   

   Regional registries

   The example above uses the US-based OCI registry. Tenants in the following Certificate Manager - SaaS regions—US, Canada, Australia, and Singapore must use this registry. Tenants in the EU and UK must use the EU registry: private-registry.venafi.eu.

   For more information on CyberArk OCI registries, see Configuring access to a CyberArk OCI Registry.

   A sample cert-manager.values.yaml for users with their own OCI registry:

   cert-manager.values.yaml

   global:
     imagePullSecrets:
       - name: venafi-image-pull-secret
   
   crds:
     enabled: true
   
   image:
     repository: myregistry.example.com/cert-manager/cert-manager-controller
   
   acmesolver:
     image:
       repository: myregistry.example.com/cert-manager/cert-manager-acmesolver
   
   webhook:
     image:
       repository: myregistry.example.com/cert-manager/cert-manager-webhook
   
   cainjector:
     image:
       repository: myregistry.example.com/cert-manager/cert-manager-cainjector
   
   startupapicheck:
     image:
       repository: myregistry.example.com/cert-manager/cert-manager-startupapicheck
   

   Note

   As of cert-manager v1.15.0, the installCRDs value is deprecated in favor of crds.enabled.

2. Use Helm to install the software and wait for it to be ready:

   helm upgrade cert-manager oci://registry.venafi.cloud/charts/cert-manager \
     --install \
     --wait \
     --create-namespace \
     --namespace venafi \
     --values cert-manager.values.yaml \
     --version v1.19.1
   

   Note

   For more information about Helm support for OCI package distribution, see the Helm documentation.

Step 3: Install OpenShift Routes for cert-manager using Helm¶

1. Create a openshiftroutes.values.yaml file to define any Helm values you require. For example:

   image:
     repository: private-registry.venafi.cloud/openshift-routes/cert-manager-openshift-routes
   imagePullSecrets:
   - name: venafi-image-pull-secret
   

   For more information on the available Helm values for OpenShift Routes for cert-manager, see OpenShift Routes for cert-manager Helm values.

2. Type the following command:

   helm upgrade openshift-routes oci://registry.venafi.cloud/charts/openshift-routes \
     --install \
     --wait \
     --namespace venafi \
     --version v0.8.3 \
     --values openshiftroutes.values.yaml
   

   Note

   For more information about Helm support for OCI package distribution, see the Helm documentation.

Next steps¶

• Configuring OpenShift Routes for cert-manager