gdinizcr
1828e07540
Upversioned the cert-manager app to latest v1.20.2 to pick up the latest CVE fixes. Images From To ============= ====== ====== cert-manager-acmesolver 1.18.5 v1.20.2 cert-manager-cainjector 1.18.5 v1.20.2 cert-manager-controller 1.18.5 v1.20.2 cert-manager-startupapicheck 1.18.5 v1.20.2 cert-manager-webhook 1.18.5 v1.20.2 Test Plan: PASS: build-pkgs Bullseye PASS: build-pkgs Trixie PASS: build-image PASS: Bootstrap and apply on AIO-SX (Bullseye N-1/N-2 and Trixie) PASS: system application-update baseline -> v1.20.2 PASS: Helm chart cert-manager-v1.20.2+STX, app version 1.20.2 PASS: cert-manager pods Running, 0 alarms PASS: FluxCD HelmChart present PASS: Pod version label and labels PASS: Helm override + re-apply PASS: Manual certificate installation PASS: Certificate renewal on expiry PASS: cert-mon renewal on secret deletion PASS: selfSigned Issuer/Certificate reach READY=True on v1.20.2 PASS: Application update on N-1 PASS: Application update on N-2 PASS: Application update on Trixie (master, v1.18.5 -> v1.20.2) Depends-on: https://review.opendev.org/c/starlingx/ansible-playbooks/+/992671 Story: 2011820 Task: 54848 Change-Id: I917ef50ddbbdc725979e6e9c1ba56c4d84bd0611 Signed-off-by: gdinizcr <gabriel.DinizCremel@windriver.com>
# StarlingX/Cert-Manager-Armada-App
## Introduction [Cert-Manager](https://cert-manager.io/) is Kubernetes native application that facilities certificate management. This repository deploys Cert-Manager as a platform-managed application using FluxCD Helm Charts for the StarlingX project.
## Build The build tools available as independent repositories under the StarlingX project are necessary to build this application.
See [StarlingX Build Guide](https://docs.starlingx.io/developer_resources/build_guide.html) for more details.
To build this app:
` ${MY_REPO_ROOT_DIR}/cgcs-root/build-tools/build-pkgs cert-manager-helm stx-cert-manager-helm The generated RPM is located in
$MY_BUILD_DIR/std/rpmbuild/RPMS`.
To extract the tarball without installing on build system, use
command:
` rpm2cpio stx-cert-manager-helm-1.0-0.tis.noarch.rpm | cpio -idmv`
## Usage Note that the Cert-Manager application is included on a StarlingX install system by default.
Following commands can be used to upload, apply, remove, delete, and view the application:
` system application-remove cert-manager system application-delete cert-manager system application-upload <.tgz file> system application-apply cert-manager system application-list`
Cert-Manager Kubernetes resources can be found in the cert-manager namespace.
` kubectl get namespaces | grep cert-manager kubectl get crd | grep cert-manager kubectl get pods --namespace cert-manager`