Last active
May 7, 2020 12:14
-
-
Save metaflow/371a249b8e4234905002f67916963fb0 to your computer and use it in GitHub Desktop.
re-installing cert manager
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
kubectl describe certificate -n cert-manager | |
kubectl rollout restart -n cert-manager deployment/cert-manager | |
kubectl rollout restart -n cert-manager deployment/cert-manager-cainjector | |
kubectl rollout restart -n cert-manager deployment/cert-manager-webhook | |
kubectl describe certificate -n cert-manager | |
# cert for build.* still not applied | |
# https://cert-manager.io/docs/installation/uninstall/kubernetes/ | |
kubectl cluster-info | |
kubectl version | |
kubectl get Issuers,ClusterIssuers,Certificates,CertificateRequests,Orders,Challenges --all-namespaces | |
kubectl delete Issuers/issuer.certmanager.k8s.io/letsencrypt-prod | |
kubectl delete issuer.certmanager.k8s.io/letsencrypt-prod | |
kubectl delete issuer.certmanager.k8s.io/letsencrypt-staging | |
kubectl delete issuer.certmanager.k8s.io/letsencrypt-prod | |
kubectl delete issuer.certmanager.k8s.io/letsencrypt-prod -n jenkins | |
kubectl delete issuer.certmanager.k8s.io/letsencrypt-staging -n jenkins | |
kubectl delete -n cert-manager certificate.certmanager.k8s.io/build-prod-tls-cert certificate.certmanager.k8 | |
s.io/jenkins-prod-tls-cert | |
kubectl delete -n cert-manager certificate.certmanager.k8s.io/jenkins-staging-tls-cert certificate.certmanag | |
er.k8s.io/results-prod-tls-cert certificate.certmanager.k8s.io/results-staging-tls-cert | |
kubectl delete -n jenkins certificate.certmanager.k8s.io/jenkins-prod-tls-cert certificate.certmanager.k8s. | |
io/jenkins-staging-tls-cert certificate.certmanager.k8s.io/results-prod-tls-cert certificate.certmanager.k8s.io/res | |
ults-staging-tls-cert | |
kubectl delete -n jenkins order.certmanager.k8s.io/jenkins-prod-tls-cert-3780826862 order.certmanager.k8s.io | |
/jenkins-staging-tls-cert-1729776955 order.certmanager.k8s.io/results-prod-tls-cert-783299090 order.certmanager.k8s | |
.io/results-staging-tls-cert-3145537943 | |
kubectl get Issuers,ClusterIssuers,Certificates,CertificateRequests,Orders,Challenges --all-namespaces | |
kubectl delete -f https://github.com/jetstack/cert-manager/releases/download/v0.10.1/cert-manager.yaml | |
# https://cert-manager.io/docs/installation/kubernetes/ | |
kubectl apply -f https://github.com/jetstack/cert-manager/releases/download/v0.15.0/cert-manager.yaml\n | |
kubectl create clusterrolebinding cluster-admin-binding \\n --clusterrole=cluster-admin \\n --user=$(gcloud config get-value core/account) | |
kubectl apply -f kubernetes/reverse-proxy/Issuer.yaml | |
kubectl apply -f kubernetes/reverse-proxy/Certificates.yaml | |
kubectl apply -f kubernetes/phabricator-proxy/Certificates.yaml | |
kubectl describe certificate --all-namespaces | |
kubectl apply -f kubernetes/phabricator-proxy/Ingress.yaml | |
kubectl get Issuers,ClusterIssuers,Certificates,CertificateRequests,Orders,Challenges --all-namespaces | |
kubectl get certificate --all-namespaces | |
kubectl apply -f kubernetes/phabricator-proxy/Certificates.yaml | |
kubectl get Issuers,ClusterIssuers,Certificates,CertificateRequests,Orders,Challenges --all-namespaces | |
# found that https://cert-manager.io/docs/usage/ingress/ tells that certificates are created automatically | |
kubectl delete -n buildkite certificate.cert-manager.io/build-prod-tls-cert certificaterequest.cert-manager.io/build-prod-tls-cert-1719034844 | |
kubectl delete -f kubernetes/phabricator-proxy/Certificates.yaml | |
kubectl delete -f kubernetes/reverse-proxy/Certificates.yaml | |
kubectl get Issuers,ClusterIssuers,Certificates,CertificateRequests,Orders,Challenges --all-namespaces |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment