Step 2: Install cert-manager

You are currently viewing version 1.7 of the Apigee hybrid documentation.This version is end of life. You should upgrade to a newer version. For more information, seeSupported versions.

This step explains how to download and installcert-manager, required for Apigee hybrid to operate.

Important:You do not need to do this step if you are performing a fresh installation on asupported Anthos platform. Anthos (versions 1.8.2 and later) comes with its own version of cert-manager. Apigee can use this Anthos version of cert-manager as long as it is installed in thecert-manager namespace (which is the default namespace).

If for certain reasons, you need to use your own cert-manager,follow the steps described inConflictingcert-manager installation beforecontinuing.

Install cert-manager

  1. Use the following command to install cert-manager v1.7.2 from GitHub.
    kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.7.2/cert-manager.yaml

    You should see a response that the cert-manager namespace and several cert-manager resources have been created. For example:

    customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io configuredcustomresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io configured...mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configuredvalidatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
  2. Verify that cert-manager installed correctly with thekubectl get pods command:
    kubectl get pods -n cert-manager
    NAME                                       READY   STATUS    RESTARTS   AGEcert-manager-86c986667c-7tqgv              1/1     Running   0          2d21hcert-manager-cainjector-74ccd955db-sb6ls   1/1     Running   0          2d21hcert-manager-webhook-7cbb85cfb7-z9kwq      1/1     Running   0          2d21h

Summary

You now have cert-manager installed, and you are ready to install the ASM to provide the Istio ingress function connectivity for your hybrid runtime plane.

12(NEXT) Step 3: Install ASM456789

Except as otherwise noted, the content of this page is licensed under theCreative Commons Attribution 4.0 License, and code samples are licensed under theApache 2.0 License. For details, see theGoogle Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.

Last updated 2026-02-18 UTC.