You are currently viewing version 1.8 of the Apigee hybrid documentation.This version is end of life. You should upgrade to a newer version. For more information, seeSupported versions.

This step explains how to download and installcert-manager, required for Apigee hybrid to operate.

Important:You do not need to do this step if you are performing a fresh installation on asupported Anthos platform. Anthos (versions 1.8.2 and later) comes with its own version of cert-manager. Apigee can use this Anthos version of cert-manager as long as it is installed in thecert-manager namespace (which is the default namespace).

If for certain reasons, you need to use your own cert-manager, follow the steps described inConflicting cert-manager installation.

Install cert-manager

1. Use the following command to install cert-manager v1.7.2 from GitHub.

   kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.7.2/cert-manager.yaml

   You should see a response that the cert-manager namespace and several cert-manager resources have been created. For example:

   customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io configuredcustomresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io configured...mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configuredvalidatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured

2. Use the following command to verify the successful creation of cert-manager namespace and its corresponding components:

     # kubectl get all -n cert-manager -o wide

   Your output should be similar to the following example. You should see pods forcert-manager,cert-manager-cainjector, andcert-manager-webhook.

       NAME                                          READY   STATUS    RESTARTS   AGE    IP          NODE                                       NOMINATED NODE   READINESS GATESpod/cert-manager-8568b6f9cb-cz4h2             1/1     Running   0          2d6h   10.56.3.7   gke-cluster-01-apigee-data-d932c3f6-0v1jpod/cert-manager-cainjector-c9c77b797-nk56p   1/1     Running   0          2d6h   10.56.7.2   gke-cluster-01-apigee-data-8a689178-en9xpod/cert-manager-webhook-885b8ffcb-q6vvk      1/1     Running   0          2d6h   10.56.3.2   gke-cluster-01-apigee-data-d932c3f6-0v1jNAME                           TYPE        CLUSTER-IP    EXTERNAL-IP   PORT(S)    AGE   SELECTORservice/cert-manager           ClusterIP   10.60.2.36        9402/TCP   91d   app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-managerservice/cert-manager-webhook   ClusterIP   10.60.10.97        443/TCP    91d   app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhookNAME                                      READY   UP-TO-DATE   AVAILABLE   AGE   CONTAINERS     IMAGES                                            SELECTORdeployment.apps/cert-manager              1/1     1            1           91d   cert-manager   quay.io/jetstack/cert-manager-controller:v1.7.2   app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-managerdeployment.apps/cert-manager-cainjector   1/1     1            1           91d   cert-manager   quay.io/jetstack/cert-manager-cainjector:v1.7.2   app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjectordeployment.apps/cert-manager-webhook      1/1     1            1           91d   cert-manager   quay.io/jetstack/cert-manager-webhook:v1.7.2      app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhookNAME                                                DESIRED   CURRENT   READY   AGE   CONTAINERS     IMAGES                                            SELECTORreplicaset.apps/cert-manager-8568b6f9cb             1         1         1       91d   cert-manager   quay.io/jetstack/cert-manager-controller:v1.7.2   app.kubernetes.io/component=controller,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cert-manager,pod-template-hash=8568b6f9cbreplicaset.apps/cert-manager-cainjector-c9c77b797   1         1         1       91d   cert-manager   quay.io/jetstack/cert-manager-cainjector:v1.7.2   app.kubernetes.io/component=cainjector,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=cainjector,pod-template-hash=c9c77b797replicaset.apps/cert-manager-webhook-885b8ffcb      1         1         1       91d   cert-manager   quay.io/jetstack/cert-manager-webhook:v1.7.2      app.kubernetes.io/component=webhook,app.kubernetes.io/instance=cert-manager,app.kubernetes.io/name=webhook,pod-template-hash=885b8ffcb

Summary

You now have cert-manager installed, and you are ready to install the Apigee hybrid command-line tool on your local machine.

12(NEXT) Step 3: Install apigeectl45678910