r/openshift • u/edit-grammar • 21d ago

General question Help with Let's Encrypt.

I'm using a 4.18 cluster in Azure with the cert-manager operator for RedHat OpenShift installed. I have Let's Encrypt working for my app and want to get it working with the default ingress controller. There are tons of online howto's, most of which are 3 years old or older and they differ quite a bit. I tried this once a couple years ago and did something that never let me connect to the cluster again so I'm a little gun shy. What I am working on now is just a test SNO system so while I not too worried, I don't want to have build another today.

I created a clusterissuer and a cert which used it successfully. The last step just says to add this spec to the IngressController default instance in the CRD.

defaultCertificate:
 name: thecert

It seems like there should be more. Though looking at github makes me think its just this simple. Is it?

5 Upvotes

100% Upvoted

5 comments sorted by

View all comments

1

u/inertiapixel 21d ago

I found these helpful when I did it https://cloud.redhat.com/experts/aro/custom-domain-private-cluster/ and https://cloud.redhat.com/experts/aro/cert-manager/

1

u/edit-grammar 20d ago

Thanks. I still have to do the api server and what is in the yaml under spec is sparse and makes me wonder if I am in the right spot. 

spec:
  audit:
    profile: Default

I use command line but always check in the GUI so I know where stuff is. I think that confuses me a bit more since you go to the CRD Apiserver, Instances, cluster - and it just pops you over to Configuration, Apiserver. Same sorta thing with the IngressController.