- The cert-manager controller is running and ready in the current cluster.
- The digicert-issuer controller is running and ready in the current cluster
Note: In this context deploy means kubectl apply -f $file.yaml
.
-
Replace the
DIGICERT_API_TOKEN
in the secret and deploy it. -
Adjust the configuration and deploy the DigiCert issuer and wait until it becomes
ready
.
Validate the current status viakubectl describe digicertissuer digicert-issuer
. -
Deploy the sample certificate.
-
The cert-manager will create the corresponding CertificateRequest, which can be seen using
kubectl get certificaterequest
. -
This controller will ensure the certificate is being issued by the Digicert API and stored in the specified secret. Verify the
tls.crt
andtls.key
are present in the secret:kubectl get secret -o yaml somednsname-tld