cert-manager-cmctl

Minimal, wolfi-based images for Cert Manager: Provisions and manages TLS certificates in Kubernetes.

Download this Image

The image is available on cgr.dev:

docker pull cgr.dev/chainguard/cert-manager:latest

Images

Cert manager is composed of multiple container images. These can be deployed separately, but are typically deployed together leveraging the official helm chart.

The chainguard provided images for Cert manager are as follows:

cgr.dev/chainguard/cert-manager-controller:latest
cgr.dev/chainguard/cert-manager-cainjector:latest
cgr.dev/chainguard/cert-manager-acmesolver:latest
cgr.dev/chainguard/cert-manager-webhook:latest

Deploy using helm

Please refer to the upstream documentation for full instructions on how to use and deploy Cert mananager via helm.

Below is an example of how to use the Chainguard images with the helm chart:

# Replace `--version`` accordingly, refer to helm chart documentation.
helm install \
  cert-manager jetstack/cert-manager \
    --namespace cert-manager \
    --create-namespace \
    --version v1.13.3 \
    --set image.repository=cgr.dev/chainguard/cert-manager-controller \
    --set image.tag=latest \
    --set cainjector.image.repository=cgr.dev/chainguard/cert-manager-cainjector \
    --set cainjector.image.tag=latest \
    --set acmesolver.image.repository=cgr.dev/chainguard/cert-manager-acmesolver \
    --set acmesolver.image.tag=latest \
    --set webhook.image.repository=cgr.dev/chainguard/cert-manager-webhook \
    --set webhook.image.tag=latest \
    --set installCRDs=true

Note, if the required CRDs are not available in the cluster, the helm chart will fail if --set installCRDs=true is omitted.